AI Voice-Swapping Scam Impersonating Customer Service: Cloned Voiceprints Induce Transfers

Who Gets Targeted

The main victims are internet users aged 20 to 50, e-commerce platform consumers, and corporate finance personnel. Among them, middle-aged and older groups account for 62% because their ability to identify voiceprints is relatively weak. In addition, novice users who have recent platform transaction records and have just started using online services are also key targets. Scam gangs exploit victims' anxiety to quickly resolve after-sales problems and their worry that account abnormalities will affect their credit record. They use the identity of official customer service to lower victims' vigilance and induce them to click phishing links or transfer money directly. Many victims relax verification because the caller ID shows an official number and the voice sounds familiar, resulting in property losses.

骗局怎么运作

• The first step is information collection. Scam gangs obtain users' e-commerce order information, mobile numbers linked to platform accounts, and records of frequently used customer service calls through dark web purchases and data breach channels. They may even use AI voice calls to test users' answering habits and screen out users with recent e-commerce after-sales needs or who have handled financial services as targets. The scripts are pre-annotated with details such as the items the user purchased and order numbers to increase credibility.
• The second step is voiceprint cloning. Scammers use previously obtained user call recordings and public short-video audio materials, along with AI voice cloning tools, to generate highly realistic voiceprints of the target user's relatives and friends or platform official customer service. Some gangs also connect real-time voice-changing software to dynamically adjust voice and tone during the call, fully replicating a real person's tone, pauses, and even breathing, making it difficult to distinguish by ear.
• The third step is caller ID spoofing. Scam gangs use GOIP and VOIP number-changing devices to alter the caller ID of scam calls to the corresponding platform's official customer service number or bank service hotline. They even fake hold music and keypad prompts in the call recording, so victims completely mistake it for a call from a legitimate institution.
• The fourth step is script-based inducement. Scammers start with common customer service scripts such as 'Your order is abnormal and needs a refund,' 'Your account has a security risk and needs verification,' or 'Your insurance has expired and needs renewal.' They ask victims to add a so-called 'dedicated customer service' social account, or click a sent phishing link to enter bank card numbers and verification codes. Some also create urgency with phrases such as 'this will affect your credit record' or 'your account will be frozen,' leaving victims no time to verify.
• The fifth step is fund transfer. After victims transfer money as requested or enter sensitive information, scammers immediately move the funds through transfers or unauthorized card use. Some gangs continue to induce repeated transfers with scripts such as 'a deposit must be paid to unfreeze the account' or 'the refund requires verifying transaction records first' until the victim notices.

红旗信号（看到这些快跑）

• 🚩 Although the incoming call number displays as an official customer service, bank, or other institution number, the other party asks you to add a private social account, click a link on a non-official domain, or provide your bank card password or SMS verification code.
• 🚩 During the call, they create urgency with phrases such as 'account abnormality,' 'affects credit record,' 'funds frozen,' or 'order lost,' demanding immediate action and not allowing time to verify through official channels.
• 🚩 Although the voice sounds familiar, there are mechanical pauses, abnormal background noise (for example, no background noise typical of a legitimate customer service center), or the other party refuses video verification of identity on the grounds of 'poor signal.'
• 🚩 So-called 'refunds,' 'claims,' or 'account unfreezing' require you to transfer money first, pay a deposit, or verify fund transaction records, which does not match legitimate platform procedures.
• 🚩 During the call, the other party frequently changes scripts or asks you to cut off contact with family and colleagues and operate alone in a quiet environment.

真实案例

• In February 2026, a consumer A on an e-commerce platform received a call displaying the platform's official customer service number. The other party claimed that the purchased goods were lost and a refund was needed, and used an AI-cloned customer service voiceprint to induce A to click a phishing link and enter a bank card number and SMS verification code. A was defrauded of RMB 127,000. The case has been solved by local police, and the scam gang involved has been criminally detained in accordance with law.
• In May 2026, finance staff member B at a small and medium-sized enterprise received a call displaying the customer service number of a partner bank. The other party claimed that the corporate account annual inspection required transaction record verification, and used an AI-cloned bank customer service voiceprint to induce B to transfer RMB 2.8 million from the company account to a so-called 'safe account.' B only realized the scam after bank staff visited to verify. The case is currently under investigation.
• In March 2026, an elderly user C received a call displaying the voice of her daughter. The other party claimed that a traffic accident had occurred and compensation had to be paid, and induced C to hand RMB 198,000 in pension savings to a 'staff member' who came to collect the money. In fact, a scam gang used an AI-cloned voiceprint to impersonate her relative. The case has been publicly reported by CCTV News, and local police have arrested some suspects involved.
• In September 2025, the Tanjiang Police Station of the Daxiang Branch of the Shaoyang Municipal Public Security Bureau reported an AI voice-swapping relative impersonation scam: scammers used AI voice-swapping to impersonate a grandson's voice, falsely claimed that he had been detained in a traffic accident, and tricked an octogenarian into paying RMB 30,000 as a deposit. After the suspect was arrested, the funds were fully recovered. (Source: https://www.hnzf.gov.cn/content/646943/59/15282880.html)
• In April 2023, the Telecom Network Crime Investigation Bureau of the Baotou Municipal Public Security Bureau in the Inner Mongolia Autonomous Region reported an AI face-swapping friend impersonation scam: scammers used AI face-swapping to impersonate a friend in a video call with the legal representative of a Fuzhou-based technology company, and used the excuse that a bid deposit was required to make him transfer RMB 4.3 million in two transfers. He only realized the fraud afterward. (Source: https://news.cnr.cn/native/gd/20230526/t20230526_526264932.shtml)

Official Stance

• On April 28, 2026, Xinhua Net published an investigative report titled 'Beware of AI Customer Service Phone Scams,' exposing the operating model and social harm of AI voice-swapping scams impersonating customer service.
• On July 22, 2026, national security authorities issued an official reminder, warning the public to be alert to AI voice imitation scams and emphasizing that when receiving unfamiliar calls involving transfers or sensitive information, they must verify identity through official channels.
• In February 2026, the Criminal Investigation Bureau of the Ministry of Public Security issued an emergency warning, noting that AI voice cloning scam methods have been upgraded and that up to 1,500 scam calls can be made per day. It reminded the public that when receiving so-called customer service calls, they must call back through the official app to verify, not click unfamiliar links, and not disclose verification codes.

How to Protect Yourself

• ✅ When receiving any call from customer service, a bank, or a platform, regardless of whether the number displays as official, do not trust it easily. Always call back through the platform's official app or the official customer service number listed on the official website to verify identity.
• ✅ Anyone who asks you to add a private social account, click a link on a non-official domain, or provide a bank card password or SMS verification code should be hung up on immediately. Legitimate institution customer service will never ask for such sensitive information.
• ✅ For calls involving transfers, refunds, or account abnormalities, immediately tell family members or colleagues, or call official customer service to verify. Do not rush to act under the urgency created by the other party.
• ✅ Regularly change passwords for various platform accounts, enable account login protection, remote login alerts, and transaction alerts, and avoid revealing too much personal information on public platforms, reducing the risk of scam gangs obtaining information for voiceprint cloning.