Your Voice Can Be Cloned in Three Seconds

The office manager at a small construction firm got a voicemail on a Friday afternoon. It was the owner. His voice, his cadence, the way he trails off at the end of a sentence. He was stuck on a job site, a supplier had just changed their bank details, and the payment had to go out before the bank closed. She had heard him ask for things like this a hundred times. So she sent it.

The owner never left that voicemail. He was never on that job site. By Monday the money was gone, and the supplier on the other end was a stranger with a laptop.

Cloning a voice got cheap and fast

What changed is the price and the speed. A few years ago, faking someone's voice took a studio and a lot of source material. Now it takes about three seconds. Microsoft demonstrated a system that could copy a voice from a three-second clip, and researchers at McAfee found that three seconds of audio was enough to land an 85 percent match. Feed it a minute or two and you get a clone good enough to hold a live phone call.

The unsettling part is where the audio comes from. Your voicemail greeting. A webinar you spoke on. Thirty seconds of a local news segment or an Instagram video. If your voice exists anywhere online, it exists as raw material. You do not have to be famous. You just have to be findable.

Why small businesses are the easy target

Big companies have wire-approval workflows, callback policies, and a finance team trained to be suspicious of anything that feels rushed. Most small businesses have one person who trusts the owner and moves fast, because moving fast is the job. That trust is the whole product a scammer is buying when they clone a voice.

The numbers say it is working. The FTC reported that Americans lost 3.5 billion dollars to imposter scams in 2025, more than any other kind of fraud, with nearly one in three fraud reports falling into that single category. Close to a billion of it came from criminals posing as businesses. Separately, the FBI has tracked more than 55 billion dollars in exposed losses to business email compromise between 2013 and 2023, the scam where someone poses as a boss, a vendor, or a client to reroute a payment. Voice cloning just handed that old playbook a new and very convincing tool.

It does not always pretend to be the boss, either. Sometimes the call is a vendor you actually use, saying their banking details changed and could you update the file. Same trick, different mask. And it works because it targets a person, not a computer. No firewall stops a phone call that sounds exactly like someone you trust.

The fix is boring, and that is why it works

Here is the part that runs against the doom. You do not need expensive detection software to shut most of this down. You need a habit. Three of them, actually, and none of them cost a dollar.

A callback rule. Any request to move money or change payment details gets verified on a number you already have, not the one that just called you. Hang up, call the known line, confirm. Thirty seconds, every time, no exceptions.

A code word. Agree on a simple passphrase for anything involving money. If the owner on the phone cannot say it, the conversation is over. A cloned voice can copy how you sound. It cannot know a word you never said out loud online.

A second set of eyes. No single person approves a new bank account or a large transfer alone. One more person breaks the entire scheme, because these scams live or die on catching one trusting person in a hurry.

None of this is high-tech. That is the point. The attack is sophisticated. The defense does not have to be.

Using AI and staying safe from it are not opposites

It would be easy to read all this and decide AI is the enemy. It is not. The same month a cloned voice can cost you fifty thousand dollars, AI is answering your phones, catching the invoices you forgot to send, and reading the customer reviews you never had time for. The tool does not have a side. The people pointing it do.

The businesses that come out ahead are not the ones hiding from AI. They are the ones that put a few simple guardrails in place and keep going. A verification habit is not a tax on using technology. It is what lets you use it without looking over your shoulder.

Your voice is already out there, and that part you cannot change. What happens when someone copies it comes down to one thing: how your business handles a phone call that feels urgent.

If you want help putting simple, human guardrails around the AI you already use, that is what we do at Nexera Intelligence. No fear, no fluff. Just what actually works.