Deepfake Fraud Prevention Guide for Urgent Calls

When this applies

Use this deepfake fraud prevention guide when a voice call, video call, voice note or recorded message appears to come from someone you trust and requests money, credentials, verification codes or confidential information. Myth: “I would notice a fake voice or face.” Reality: convincing deepfakes may have no obvious glitches, especially during a short, stressful conversation. A typical request may sound like: “I need you to send the payment now. Do not call me back because I cannot talk.” Treat the identity and request as unverified, even when the voice, face or displayed account looks familiar.

Decision steps in order

1. Stop the interaction. Do not transfer funds, disclose passwords, share one-time codes or open links while the caller is waiting.
2. Create a separate verification path. Call the person or organization using a number you already had before the request; do not use contact details supplied during the conversation.
3. Ask an independent question. Confirm a private detail that is not available in public posts, previous messages or workplace profiles.
4. Verify the requested action separately. For workplace payments, contact the finance approver through the established internal process; for family requests, reach another relative who can confirm the situation.
5. Inspect context, not just appearance. Look for secrecy, urgency, changed payment instructions, refusal to reconnect and requests that bypass normal approval steps.
6. Decline if verification fails. End the call and preserve the message, account name, phone number, timestamp and payment instructions for reporting.

Myth: “The bank will catch it.” Reality: an authorized transfer may be processed because the victim approved it, even when impersonation caused that approval.

What to do if you already responded

• Contact the bank or payment provider immediately and request a fraud recall or account freeze.
• Change exposed passwords from a trusted device and revoke active sessions.
• Tell your employer or affected contact that their identity was impersonated.
• Preserve recordings, messages and transaction records, then report the incident to the relevant fraud or law-enforcement authority.

Most common warning signals

• An unexpected voice or video request asks for money, credentials, verification codes or confidential information.
• The caller creates urgency or demands secrecy.
• The caller discourages a callback or insists on staying connected while you act.
• Payment instructions differ from the usual account or approval process.
• The supposed contact cannot answer a private verification question.
• The request arrives through an unfamiliar account, number or communication channel.

What to do now

1. End the call or video session without sending money or information.
2. Contact the supposed person through a previously saved number or established channel.
3. Verify any payment request through the normal approval process and a second trusted person.
4. Call the bank or payment provider immediately if money was sent.
5. Change exposed passwords and revoke active account sessions.
6. Preserve messages, recordings, timestamps and transaction details for reporting.

Sources

• www.resemble.ai
• www.techtransparencyproject.org
• unit42.paloaltonetworks.com
• www.kaspersky.com
• www.theguardian.com

Further reading

• Deepfake Scam Trend Analysis for Family Safety
• 7 Deepfake Scam Warning Signs Before You Pay
• ATO and Messaging App Hijacks: Fast Checks

FAQ