AI and Governance · 5 min · 11 sources · 10 primary · Verified 16 October 2026 · Sources re-checked 16 October 2026
Can you still trust a voice on the phone?
A widely shared claim says AI voice cloning now dominates fraud, citing a 1,200 percent rise in FTC deepfake complaints and AI voice or video in 40 percent of business email compromise. The FTC and FBI records checked do not contain either figure, though cloned voices are a documented fraud tool.
“AI voice cloning has become the dominant fraud vector, with deepfake complaints to the FTC up 1,200 percent and 40 percent of business email compromise attacks now using AI voice or video.”
The claim does not hold. No FTC record checked contains a 1,200 percent rise in deepfake complaints, and no primary record located says 40 percent of business email compromise uses AI voice or video. The FBI's 2025 report ties AI references to 22,364 complaints and $893 million, about 4 percent of $20.877 billion in losses, though that tag counts only what victims noticed and reported.
The claim travels as a pair of statistics attached to one conclusion. AI voice cloning, it says, has become the dominant fraud vector. Deepfake complaints to the Federal Trade Commission are up 1,200 percent, and 40 percent of business email compromise attacks now use AI voice or video. No author, date or document travels with it. It does name a federal agency, which makes it sound like something a reader could check.4,1
Neither statistic appears in the FTC and FBI records checked for this piece, and the claim attributes only the first to an agency. Voice cloning is a real and documented fraud tool. The FBI's 2025 ledger does not show it as the dominant one. Complaints that referenced AI accounted for about 4 percent of reported losses.1
Does the FTC count deepfake complaints?
The FTC's annual accounting of fraud reports is the Consumer Sentinel Network Data Book. The 2024 edition was published in March 2025. It states that it is based on unverified reports filed by consumers and is not a consumer survey.4 In the portion that was read, its 29 report categories include no deepfake or AI voice category.4 The appendices could not be read in full, so that absence holds for the main tables only.
On 15 June 2026, the FTC announced that people reported losing $3.5 billion to imposter scams in 2025. Nearly one in three fraud reports concerned imposter scams.3 The announcement says nothing about deepfakes, voice cloning or a 1,200 percent rise.3
The FTC's prepared statement to the Joint Economic Committee on 25 March 2026 gave the 2025 totals: 3 million fraud reports and $15.9 billion in reported losses.5 It does not break out deepfake or voice-cloning complaints. It mentions the agency's 2023 to 2024 Voice Cloning Challenge only in passing, in a paragraph on industry collaboration, with no complaint data.5 A 1,200 percent increase needs a published series to measure against. None of these three FTC documents contains one in the portions read.
What does the FBI count?
The FBI's Internet Crime Complaint Center published its 2025 report in 2026. It logged 1,008,597 complaints and $20.877 billion in reported losses.1 Complaints tagged as AI related numbered 22,364, with losses of $893,346,472.1 That is about 2.2 percent of complaints and about 4.3 percent of dollars.
The largest loss categories were investment fraud, at $8.65 billion, and business email compromise, at about $3.05 billion.1 AI-related losses across every category combined were roughly a tenth of investment fraud alone. The ledger does not show AI, let alone voice cloning specifically, as the dominant vector.
The Senate Special Committee on Aging repeated the same figures in its July 2026 report. It cited nearly $21 billion in 2025 cybercrime losses, with $893 million tied to AI-enabled scams across more than 22,000 complaints.2 It drew its fraud data from the IC3 and the FTC. It added no independent count of deepfake complaints.2
Where does the 40 percent come from?
The IC3 report addresses AI within business email compromise directly. It says voice cloning can be used to request wire payments. It also says there are multiple BEC tactics and not all are AI-enabled. In 2025, businesses reported losses over $30 million to BEC scams involving AI.1 Against roughly $3.05 billion in BEC losses, that is at least about 1 percent by value. That measures dollars, not the share of attacks.1
No primary record located for this piece says 40 percent of BEC attacks use AI voice or video. The nearest number in circulation is a security vendor's blog post (Hoxhunt) relaying a VIPRE Security Group estimate, via SC Media, that about 40 percent of BEC emails in Q2 2024 were AI-generated, based on a sample run through AI-text detectors.11 That measures how a message was worded, using AI-text detectors on a sample of unstated size. It does not measure cloned voices or faked video, and the underlying VIPRE report was not reviewed for this piece. The same post says AI voice clones and video deepfakes are "still relatively rare but growing."11
Is the FBI figure the real share?
No. The AI tag counts only what complainants reported, and the IC3 report does not present it as the full share.1 The report describes AI-enabled content as increasingly hard to detect.1 The true share may be higher than the tagged figure, because victims who never suspected a synthetic voice would not have flagged AI. No record measures by how much, and nothing in the record supports 40 percent.
Is voice-clone fraud documented at all?
Yes. The Federal Communications Commission adopted a ruling on 2 February 2024 (FCC 24-17, released 8 February). It held that AI technologies such as voice cloning fall within the Telephone Consumer Protection Act's existing restriction on artificial or prerecorded voice messages, which requires the called party's prior express consent.7 The ruling is a legal interpretation. It does not measure how common the fraud is, and it does not stop callers who ignore the law.7
On 13 November 2024, the Treasury's Financial Crimes Enforcement Network issued alert FIN-2024-Alert004. It reported that criminals have used generative AI to impersonate executives or trusted employees and instruct victims to send large payments to accounts the scammers control.6 The alert focuses mainly on deepfaked identity documents used to open or access accounts. It gives no volume or percentage figures.6
A 2025 IC3 brochure produced with the ABA Foundation says imposter scams are rising and that criminals use deepfakes to gain trust.10 Its headline figures, more than 4.2 million reports and $50.5 billion since 2020, cover all fraud reported to the FBI, not deepfake fraud.10 The World Economic Forum's Global Cybersecurity Outlook 2026 says criminals use generative AI to produce deepfake audio and video that can evade detection systems and human scrutiny.9 That report rests on surveys and focus groups. It reflects perceptions, not incident counts.9
Can a listener tell the difference?
Not reliably. In a study published in PLOS ONE on 2 August 2023, researchers at UCL played speech clips to 529 online participants. Listeners correctly identified the deepfakes 73 percent of the time, with no difference between English and Mandarin.8 The test used short clips from one speaker per language and publicly available text-to-speech models. It did not test live calls, familiar voices or pressure to act quickly.8 It shows that the ear is a weak detector. It says nothing about how often fraud uses cloned voices.
The Senate Aging report says the FBI recommends a family code word. Its endnotes list an FBI IC3 public service announcement from December 2024 that gives that advice, though the report does not tie the note to the sentence explicitly.2
Not on its own, but not for the reason the claim gives. The 1,200 percent and 40 percent figures do not appear in the FTC and FBI records checked, and the FBI's 2025 report ties AI to about 4 percent of reported losses. Cloned voices are still a documented fraud tool: listeners in a 2023 lab test, which did not use familiar voices, caught speech deepfakes only 73 percent of the time. Federal advice is to confirm a payment request by another channel, whatever share of fraud uses cloning.
Dahling
Sources and limitations
- 12025 Internet Crime Report (FBI Internet Crime Complaint Center)FBI / IC3, 2026-04primary · ReportLimitation: Counts only complaints that victims chose to file, and AI attribution depends on what victims noticed or reported. The report calls AI-enabled content increasingly hard to detect, so AI-related totals are probably undercounts. The AI section sits past the point where my document read was cut off. I confirmed its wording through a search extract of the same PDF. The tables I did read directly give 1,008,597 complaints, $20.877 billion in losses, 22,364 AI-related complaints and $893,346,472 in AI-related losses. The report has no FTC-style 'deepfake complaints' series and no '40% of BEC' figure.↩
- 2Artificial Intelligence & Older Americans: Confronting New Threats, Unlocking New OpportunitiesU.S. Senate Special Committee on Aging (Chairman Rick Scott; Ranking Member Gillibrand), 2026-07primary · ReportLimitation: A congressional committee staff report that argues for legislation. Its fraud figures are secondhand, drawn from the IC3 and FTC. It adds no independent data on deepfake complaint growth. The 'code word' advice is attributed to the FBI but not linked to a specific FBI document.↩
- 3FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025Federal Trade Commission, 2026-06-15primary · Agency pageLimitation: An FTC press release on its own 2025 Consumer Sentinel data. It says nothing about deepfakes, voice cloning, or any 1,200% rise in complaints. Sentinel reports are unverified, consumer-submitted complaints.↩
- 4Consumer Sentinel Network Data Book 2024Federal Trade Commission, 2025-03primary · DatasetLimitation: Covers calendar 2024 only. In the portion I read, it has no deepfake or AI-voice category among its 29 report categories. I could not read the full appendices, because the file was cut off at about 50,000 of 62,000 characters. It therefore cannot support a '1,200 percent' deepfake-complaint figure. The data are unverified consumer reports.↩
- 5Prepared Statement of the FTC, 'The Rising Scam Economy' (Joint Economic Committee)Federal Trade Commission, 2026-03-25primary · TranscriptLimitation: Written congressional testimony giving aggregate 2025 Sentinel numbers. It does not break out deepfake or voice-cloning complaints. It mentions the FTC's 2023-24 Voice Cloning Challenge only in a footnote.↩
- 6FinCEN Alert on Fraud Schemes Involving Deepfake Media Targeting Financial Institutions (FIN-2024-Alert004)U.S. Treasury, FinCEN, 2024-11-13primary · Agency pageLimitation: A regulatory alert based on Bank Secrecy Act filings, open-source reporting and law-enforcement input. It focuses mainly on deepfaked identity documents used to open or access accounts. It gives no volume or percentage figures for deepfake fraud and says nothing about FTC complaints. Its date is November 2024.↩
- 7Declaratory Ruling, Implications of Artificial Intelligence Technologies on Protecting Consumers from Unwanted Robocalls and Robotexts, FCC 24-17, CG Docket No. 23-362Federal Communications Commission, 2024-02-08primary · Regulatory filingLimitation: A legal interpretation of the Telephone Consumer Protection Act (TCPA) as it applies to AI-generated voices, issued in February 2024. It is not a measure of how common voice-clone fraud is. It also does not reach scammers who ignore the law, or non-robocall channels.↩
- 8Warning: Humans cannot reliably detect speech deepfakes (PLoS ONE 18(8): e0285333)PLOS ONE (Mai, Bray, Davies, Griffin, UCL), 2023-08-02primary · Peer-reviewed studyLimitation: A lab experiment with 529 online participants (mean age 28.9), using short clips from a single speaker per language and publicly available text-to-speech models. It did not test live phone calls, familiar voices, or emotional-pressure scenarios. It shows detection by ear is unreliable. It does not measure how often fraud actually uses cloned voices.↩
- 9Global Cybersecurity Outlook 2026 (Insight Report)World Economic Forum with Accenture, 2026-01primary · ReportLimitation: A survey- and focus-group-based industry report that reflects respondent perceptions. It is not a count of incidents. I read about 50,000 of 60,000 characters. It makes no statement of '40% of BEC' or '1,200%' in the part I read.↩
- 10Deepfake Media Scams (infographic, with ABA Foundation)FBI IC3 / ABA Foundation, 2025primary · Agency pageLimitation: A public-awareness brochure, not a data release. Its headline figures cover all FBI-received fraud reports since 2020 (4.2 million+ reports, $50.5 billion), not deepfake-specific fraud. Its qualitative claim is that imposter scams are rising.↩
- 11Business Email Compromise Statistics 2026Hoxhunt (security-training vendor blog), 2026-01-05secondary · News reportLimitation: A vendor blog that sells security-awareness training. It cites a third-party (Abnormal Security, via SC World) estimate that about 40% of BEC phishing emails in Q2 2024 were AI-generated. That figure describes AI-written email text, not voice or video. The same post says AI voice clones and video deepfakes are 'still relatively rare but growing.' This is the likeliest origin of the '40%' number in the claim, and it does not support it as worded.↩