Cloned Voice Payment Fraud

What Is Cloned Voice Payment Fraud?

A recording is not a conversation. You cannot interrupt it, ask it something only the real person would know, or hear it react to being challenged, and a convincing one can be built from audio an organisation publishes. In this exercise a payment instruction arrives as a voice note from a number you do not have, with a reason you cannot call back. You practise judging the request instead of the voice, verifying on a route you already hold, and warning the colleagues who got it too.

What You'll Learn in Cloned Voice Payment Fraud

• Recognise that a familiar voice in a recording is evidence of nothing, because one-way audio cannot be questioned, challenged or asked for a verification phrase
• Identify the parts of an urgent payment request that carry the attack: a changed bank account, a reason to bypass a second approver, and a confirmation asked for on the sender's own channel
• Verify an out-of-band request on a route you already hold, such as a saved contact, the internal directory or a number printed on the contract, never one supplied by the message
• Treat a claim that the sender cannot take calls as the tell rather than an obstacle, since it exists to remove the one check that works
• Report a request that arrived on a personal messaging app and warn colleagues directly, because no company system has any record that it happened

Cloned Voice Payment Fraud — Training Steps

1. Release Day

   The Kalvholm drydock milestone is on today's release list at Ostrellan Marine, and you are the one who sends it. Two point three four million euro, against a survey the yard has already signed. At twenty past nine your phone buzzes. The name on the message is the CFO's.

2. Listen to This

   A voice note lands underneath it. Forty one seconds, in a voice you have heard in every quarterly briefing since you joined.

3. And the Account

   The payment details arrive on their own a few seconds after the recording finishes. Everything the release needs is now on your phone.

4. What the Voice Proves

   Everything in the recording is accurate, and the voice is his.

5. Who Actually Sent It

   The name at the top of the thread is whatever the sender typed when they set the account up. The number underneath it is the part that is real.

6. Call the Number You Already Have

   The message says he cannot take calls. That claim came from the same stranger as everything else on the thread, so it is worth exactly as much as the rest of it. Henrik Svanholm is in your contacts. Ring that number.

7. Still Waiting for a Reference

   You have been off the call for two minutes when the thread moves again.

8. Why the Callback Worked

   Two minutes on a number you already had settled something forty one seconds of his voice could not.

9. Somebody Else Is Getting This Too

   Henrik is back in the room and can do nothing about this for another hour. Whatever happens in that hour is down to you. Ostrellan Marine's security desk takes reports for anything that arrives outside company mail, which is the only reason this one will ever be seen.

10. File It

    Three things make this useful within the hour: what arrived and on which channel, the numbers and account details exactly as they appeared, and whether any money moved.