Voicemail scams: how to spot a fake voicemail, including AI voices
A voicemail scam is a recorded message that pretends to come from a bank, a government agency, a delivery company or a relative, and pushes you to call back, press a number or pay fast. It is vishing in recorded form. The safe response is the same every time: do not use the number in the message, look up the real one yourself, and check any voice that sounds familiar but asks for money.
Most scam voicemails want one thing: a callback on their terms. Here are the common scripts, the tells, how AI cloned voices change the picture, and what to do with a message you are not sure about.
What is a voicemail scam?
A voicemail scam is a form of vishing (voice phishing) delivered as a recorded message rather than a live call. The scammer leaves a message that creates urgency, gives a callback number they control, and waits. The recording does work a live call cannot: it reaches people who never answer unknown numbers, it can be sent in bulk, and it gives the target time to talk themselves into calling back.
The message is the bait, not the theft. The money, codes or personal details are taken on the callback, by a live person reading from a script.
What are the most common scam voicemails?
| Scam voicemail | What it says | What it wants | The tell |
|---|---|---|---|
| Tax or IRS | A last chance to settle back taxes before legal action | Your Social Security number, or an upfront fee for "tax relief" | The IRS's first contact is by mail, not a phone message (FTC, January 2026) |
| Social Security | Your number is suspended or linked to a crime | Personal details, gift cards, a wire or a crypto payment | The real SSA does not threaten you or ask for gift cards or crypto (FTC) |
| Bank fraud alert | Suspicious activity on your account, call back to secure it | Card details, a one-time passcode, a transfer to a "safe account" | Banks never ask you to read back a code or move money to protect it |
| Delivery or order problem | A parcel is held, or an order on your account needs confirming | Card details or remote access to your device | You did not place the order; the real company's app shows nothing |
| One-ring callback | No message, or a few seconds of silence, from an unfamiliar number, often international | A callback that runs up per-minute charges | The FCC advises never calling back an unfamiliar number from a single ring (FCC) |
| Family emergency | A relative in trouble, often in a voice that sounds like theirs | Bail, a lawyer's fee or a hospital payment, fast and secret | Urgency plus secrecy; the relative is fine when you call their own number |
| Official or executive | A message from a senior official or your boss, building trust before a request | A move to another app, a link, or a payment | The FBI has warned of AI voice messages impersonating senior US officials (FBI, May 2025) |
For documented cases with losses and sources, see real vishing examples.
How can you tell if a voicemail is fake?
Judge the request, not the sound. Any one of these is a reason to stop; two together, treat the message as a scam.
- It gives you a number to call back. Real institutions are happy for you to use the number on your card, statement or their official website.
- It sets a deadline in hours. "Today", "within the hour", "before a warrant is issued".
- It asks for an unusual payment. Gift cards, crypto, a wire, a payment app transfer to a stranger.
- It asks for a code or a password. No one legitimate needs a one-time passcode read back to them.
- It is vague about you. "Your account", "your package", with no name, partial account number or order reference you recognise.
- The caller ID looks right. That proves nothing: caller ID can be spoofed (FCC).
Can a scam voicemail use an AI voice?
Yes. A voicemail is the easiest place to use a cloned voice: there is no live conversation to keep up, so a few generated sentences in a familiar voice can do the job. The FTC has warned that scammers can clone a relative's voice from a short clip posted online (FTC, March 2023), and the FBI's 2025 warning described AI-generated voice messages sent to build trust before a request (FBI).
You may hear flat emotion, odd breathing, a background that never changes or a mispronounced name, but these tells are unreliable on a phone line. Two things work better:
- Call the person back on the number you already have. A cloned voice cannot answer the real person's phone.
- Save the voicemail and check it. An AI voice detector scores a saved recording for signs of synthesis and gives a verdict and an AI probability score. A synthetic result is a reason to stop. A human result does not make the request safe.
More on how voices get copied in what voice cloning is.
Why do scam voicemails ask you to call back?
Because the callback is where the scam happens. Calling back puts you on a line the scammer controls, with a live person who can answer questions, handle doubts and keep you talking until you pay or read out a code. Some numbers also charge per minute, which is the whole point of one-ring scams. A recorded message cannot steal anything on its own; your callback is the step it is designed to produce.
What should you do with a suspicious voicemail?
- Do not call the number in the message and do not press any key it asks you to press.
- Look up the real number yourself: your card, a statement, the official website or app, or a contact already in your phone.
- Keep the voicemail. Do not delete it until you have reported it; it is evidence, and you can check it with a detector.
- Report it. In the US, to the FTC at ReportFraud.ftc.gov and to the FCC at consumercomplaints.fcc.gov; if money moved, also the FBI at IC3 and your bank straight away.
- Warn the people around you. Scam crews reuse lists, and the next message often goes to a relative or a colleague.
The full checklist, including what to do if you already called back or paid, is in how to protect yourself from vishing.
Frequently asked questions
What is a voicemail scam?
Can you get scammed by listening to a voicemail?
Can scammers leave a voicemail in someone else's voice?
How do I know if a voicemail is AI generated?
Should I call back a number that rang once and hung up?
Where do I report a scam voicemail?
Save it and run it through the free detector for a probability that the voice was machine-generated, then call back on a number you already trust.