Threat Alert: What to Watch For

• The US Federal Trade Commission has warned of AI-enhanced voice phishing (vishing) calls impersonating loved ones in distress. 
• The calls use an AI system to create a believable clone of a loved one’s voice based off publicly accessible voice samples on platforms like YouTube, TikTok, or Instagram. 
• The impersonated individual will claim to be in distress and ask for financial assistance, usually in the form of a wire transfer, cryptocurrency, or specific gift cards. 
• Attackers have previously used similar tactics to target businesses by impersonating managers asking employees to make urgent wire transfers. 

Tips to Remember (at Work and at Home)

• Do not answer calls from unknown numbers. In general, this is the easiest way to avoid vishing attacks. It also prevents scammers from identifying your number as a “working number.”  
• If you wish to confirm the call, do so via a trusted number. If you receive a call requesting urgent financial action, disconnect and call back using a known, trusted number. Never use a number stated during a call, in a voicemail message, or the number used to call you.  
• Follow proper payment processes. If you receive a work call requesting urgent financial action, always follow the organizational processes in place. And for personal calls, remember that if a family member was truly in distress, they would likely not want money in the form of cryptocurrency, gift cards, or a wire transfer. 
• Remember cybercriminals take advantage of strong emotions. An urgent call from a family member or manager requesting financial help can be extremely stressful. Keep in mind cybercriminals seek to capitalize on moments of anxiety and the difficulty in thinking clearly in such situations.