Skip to main content

AI.con: a new voice for Jamtara-type scammers

Three seconds of audio is all it takes to create a voice clone that is virtually indistinguishable from the real voice, a technological advancement that is as worrying as it is thrilling because it can be put to malicious use to defraud people, said experts.

Voice clones or deepfakes have emerged as the latest tool for cyber scammers, they said, as artificial intelligence (AI)-related scams are being increasingly reported from different parts of the country.

Voice deepfaking started as an entertainment gig to mimic songs for Instagram reels on websites such as Covers.ai, Voicify.ai and VoiceFlip.ai but has spiralled into a larger problem with genuine AI startups such as ElevenLabs, Speechify, Respeecher, Narakeet, Murf.ai, Lovo.ai and Play.ht being weaponised in the hands of scammers.

 

More than a dozen websites have proliferated on the internet, offering free voice cloning options with accuracy as high as 95% in 29 languages and more than 50 accents. There are also professional voice cloning models which can mirror every intonation, rhythm and nuance.

 

“Deepfakes in general are quite dangerous, and particularly voice AI shall soon evolve into an organised phishing tool. For instance, job scams will now convert from a WhatsApp message to an actual HR voice calling you,” said Jaspreet Bindra, founder of Tech Whisperer.

 

“But, technological solutions, increased awareness and, of course, regulation shall also develop to keep a check on the proliferation of such scams.”

 

A voice clone is a synthetic audio created using generative AI tools which are trained on sample audio of a person. To create a clone, a source audio is needed which can be anything from an Instagram story to a YouTube video or even a short conversation on the phone. On Tuesday, a Lucknow resident registered a police complaint after having been allegedly duped of Rs 90,000 because of a phone call from a scammer who sounded exactly like one of the victim’s relatives. Several other such incidents of AI voice scams have been reported from Telangana and Karnataka this year. Voice cloning can be abused for committing multi-million dollar organised scams in banks, government bodies and almost any large organisation, cautioned experts.

 

“The surge in free-to-use voice cloning tools poses substantial risks in consumer and industry domains, such as identity theft and financial fraud,” said Vaibhav Tare, chief information security officer, Fulcrum Digital.

 

“In the financial sector, voice cloning compromises secure access, potentially leading to unauthorised account entry and eroding trust in voice-based authentication. In the insurance sector, voice cloning intensifies challenges by enabling fraudulent claims through fake audio recordings.”

 

According to a recent survey by cybersecurity firm McAfee, 47% of Indian adults have experienced or know someone who has experienced some kind of AI voice scam, which is almost double the global average (25%). Nearly 83% of the Indian victims said they had lost money, with 48% of them losing more than Rs 50,000. The firm surveyed 7,054 people from seven countries, including 1,010 from India. McAfee has predicted that in 2024, deepfakes will pose greater risks of identity theft, phishing scams as well as cyber bullying among children. AI service providers are aware of these downsides and therefore platforms like ElevenLabs are offering voice biometric or voice classifier tools to identify whether an audio was cloned using AI. However, cyber experts believe such tools aren’t enough to prevent voice AI scams because it is hard for an average victim to doubt the scammer amid a distress call.

 

“Preventing falling victim to a social engineering campaign that utilises voice cloning technology requires a combination of awareness, scepticism and security best practices,” said Kumar Ritesh, founder of cybersecurity firm Cyfirma. “For organisations, we recommend policies to be reviewed and to include guidelines for AI, ML (machine learning) and automation. Provide cybersecurity awareness training to employees that are closely aligned with relevant and new and emerging threats.”

 

For consumers, Ritesh said, “education and awareness campaigns to shed light on how scammers can leverage tools to clone images, video and voice are absolutely essential”.

Comments

Popular posts from this blog

Banking Norms

 What is IFSC ? IFSC stands for Indian Financial System Code. It is a 11-digit alpha-numeric code that uniquely identifies a bank branch participating in any RBI regulated funds transfer system. The IFSC code helps to transfer money using RTGS, NEFT or IMPS method. The first 4 digits of the IFSC represent the bank and last 6 characters represent the branch. The 5th character is zero.   What is MICR ? MICR is an acronym for Magnetic Ink Character Recognition which is a technology used in the banking industry in printing the MICR codes. A MICR code is a 9-digit code that uniquely identifies a bank and a branch participating in an Electronic Clearing System (ECS). The first 3 digit of the code represents the city code, the middle ones represent the bank code and last 3 represents the branch code. One can locate the MICR code at the bottom of a cheque leaf, next to the cheque number. It is also normally printed on the first page of a bank savings account passbook.   What is t...

What The 50/30/20 Budgeting Rule Means

The 50/30/20 budgeting rule is one of the best known ways to start a solid money management journey. It does not matter how much you earn. You can easily apply this rule and develop the much-needed financial discipline. Here’s how you can begin: First, write down your total earnings. Be it from your full-time jobs, any freelancing gigs, or short-term projects, include them all.  Then, segregate this amount into three buckets of 50, 30, and 20.   50% CONSTITUTES YOUR NEEDS You can fund all essential payments via this chunk. You should pay your rent, electricity, and other utility bills. These are imperative expenses intrinsic to your survival. Hence, they cannot be delayed at any cost.  In addition, you should also pay off all your loan installments, the minimum amount (at least) due on credit cards, and insurance premiums with this segment. Solidifying your financial health is important and, in fact, non-negotiable.  Hence, make sure you put aside enough money at the...

What is KYC - Meaning, Types, and Importance

Since 2004, the Reserve Bank of India made it compulsory for all Indian financial institutions to verify both the identity and address of all customers carrying out financial transactions with them. Thus, the KYC process was introduced by the RBI as the only mode of verification.   What is KYC? KYC means to ‘know your customer’ which is an effective way for an institution to confirm and thereby verify the authenticity of a customer. For this, the customer is required to submit all KYC documentation before investing in various instruments. All financial institutions are mandated by the RBI to do the KYC process for all customers before giving them the right to carry out any financial transactions. Whether the customer uses KYC online verification or opts for offline KYC, this is a simple one-time process.   The significance of KYC KYC is an important tool as it looks after the financial bodies and keeps illegal activities in check. Many non-individual customers use financial se...