AI WORLD HQHow to Spot an AI Scam Call, Fake Email, or Deepfake Voice Today
Three AI-powered scams happening right now and the one-second checks that catch each one
In short: AI scams now sound like your family, write like a real person, and spoof your bank's phone number. A five-second pause plus one private family word catches almost all of them — here's how to set both up today.
By the end of this guide you'll know how to recognize the three most common AI scams circulating right now, what one-second check stops each one, and what to do the moment you realize something is wrong. This is written for anyone who uses a phone and email — no tech background needed, and nothing here requires buying or installing anything.
💡 Tip: tap a step’s number when you finish it — a green tick appears and your browser remembers how far you got.
- A phone (mobile or landline) and an email account you check regularly.
- About 10 minutes total, mostly to set up one protection you can use for years.
- One or two trusted people — a family member or close friend — for the family safe-word step.
Listen for the giveaway in a "family emergency" voice call
When someone calls claiming to be a relative in trouble, the very first move is to hang up and dial that person's number yourself — the one already saved in your phone. What you'll usually see on screen is a familiar name on the caller ID, sometimes with a stranger's voice asking "guess who this is?" to make you fill in the blank yourself. After you hang up and redial, a real relative will answer or call you back; a scam line often disconnects, plays a generic voicemail, or doesn't ring at all. If your caller ID shows nothing or a random number, the same rule applies — never continue the call. Voice cloning (an AI that copies someone's voice from a few seconds of audio) is good enough now that even adult children of the "caller" can't tell the difference in the first few seconds.
You'll know it worked when the real person answers your second call and confirms they never phoned you.
Catch a fake customer-service agent
Any time someone calls YOU about a problem with your account — bank, phone, delivery, internet — hang up and call the company back using the number printed on your last statement or shown on the company's official site. What you'll usually see in the original call is an "agent" who already knows your name, the last four digits of your card, or recent transactions; the voice sounds professional and there's often office noise in the background to feel legit. A real company will let you hang up and call back; a scammer will push you to "stay on the line" or refuse to give you a number you can verify. If the caller insists they can't take a callback because the case is "time-sensitive," that's actually the biggest giveaway.
You'll know it worked when the real company's recorded greeting answers and the human you reach has no record of the previous call.
Spot the AI-written phishing email
Before clicking any link in a message that asks you to act, hover over the sender's address and any link to see where they actually point. What you'll see is an email that looks like it came from a delivery company, a streaming service, or your bank — the wording is fluent, friendly, and free of the typos that old scams used to have; there's often a small urgency like "act within 24 hours" to nudge you past thinking. Hovering reveals a different domain — something like usps-tracking.example.com/pay-now instead of a real postal address, or a long random-looking string of letters. On a phone you can long-press a link to preview it; if you can't tell where it goes, don't tap. AI-written phishing is convincing because the grammar is now perfect — the giveaway is no longer the spelling, it's the destination.
You'll know it worked when you can name the actual destination of the link before deciding whether to click.
Use the one-second check that works for all three
When any message or call feels urgent, scary, or too lucky to be true, pause for five seconds and ask yourself one question: "Would I be in trouble if I did nothing for the next ten minutes?" What you'll notice in those five seconds is your own hands wanting to act fast — and the caller or email pushing you to "do it now." Most scams collapse under a ten-minute pause: the "agent" hangs up and moves on, the email can sit unread overnight, and your "grandchild" is still safe wherever they actually are. Some scams add a fake countdown timer to fight this exact habit; remember that a real emergency from a real company will still be a real emergency ten minutes from now, and a real loved one will understand a short wait.
You'll know it worked when the urgency melts away and you make your next move from calm instead of panic.
Set up a family safe word today
Pick one unusual word with one or two people you trust, and agree that any "emergency" call must include this word before any money moves. A short group chat, a text, or even an in-person conversation is enough — no app or password manager needed. What this gives you is a private test that even a perfect voice clone can't pass: the scammer simply doesn't know your word, and your real relative does. If your family is scattered, agree on a private question with a private answer instead — "what did we name the cat at grandma's house?" works better than a single word when kids are involved. Write the word down once, share it with the people who need it, and don't post it anywhere online.
You'll know it worked when at least two people in your circle can recite the word without looking it up.
Know what to do in the moment you realize it's a scam
Hang up, close the email, or stop replying — and then report it, even if you didn't lose a cent. Your heart will still be beating fast, the "agent" will be gone, and the email will still be sitting in your inbox; that's normal. Reporting helps block the next person, and in the US you can forward phishing emails to [email protected] and file a report at the FTC's reportfraud.ftc.gov, or with the FBI's Internet Crime Complaint Center at ic3.gov. If you DID send money or share a one-time code, call your bank's fraud line immediately — the number on the back of your card — and ask for a recall; speed matters more than embarrassment here.
You'll know it worked when the call is over, you've told one official channel, and your accounts and passwords are unchanged.
- Trusting caller ID. Scammers can spoof any name or number. The display showing "Daughter" or "Your Bank" proves nothing — hang up and dial back on a number you saved yourself.
- Acting on the "ten-minute countdown." That timer is part of the scam. Real companies and real family emergencies don't disappear while you take a breath; pausing is always safe.
- Sharing a one-time code "to verify yourself." No legitimate company will ever ask for a code they just sent you. The instant someone asks for that string of numbers, the conversation is a scam — full stop.
- Skipping the family safe word because "it'll never happen to us." The setup takes one minute today and saves potentially life-changing money later. Treat it like a smoke detector: boring to install, priceless when it goes off.
Right now, open your messaging app and text one trusted person: "If I ever call you in a panic and ask for money or codes, ask me for our safe word. The word is [pick something unusual, like 'platypus' or 'silver-spoon']." That one text takes under two minutes and is the single highest-value defense in this whole guide.
❓ Quick questions
How long does this take?
About 6 minutes — the guide has 6 steps, and you can tick each one off as you go.
Do I need to prepare anything?
- A phone (mobile or landline) and an email account you check regularly.
- About 10 minutes total, mostly to set up one protection you can use for years.
- One or two trusted people — a family member or close friend — for the family safe-word step.
What mistakes should I avoid?
- Trusting caller ID. Scammers can spoof any name or number. The display showing "Daughter" or "Your Bank" proves nothing — hang up and dial back on a number you saved yourself.
- Acting on the "ten-minute countdown." That timer is part of the scam. Real companies and real family emergencies don't disappear while you take a breath; pausing is always safe.
- Sharing a one-time code "to verify yourself." No legitimate company will ever ask for a code they just sent you. The instant someone asks for that string of numbers, the conversation is a scam — full stop.
- Skipping the family safe word because "it'll never happen to us." The setup takes one minute today and saves potentially life-changing money later. Treat it like a smoke detector: boring to install, priceless when it goes off.
Keep reading
✦ Original step-by-step guide by AI World HQ's AI editorial team. Written in plain language, reviewed for accuracy.
← Back to all stories