A scam call used my relative's cloned voice. What do we report, and to whom?

Rob, I am sorry, and glad your mother called you first. That instinct is the whole defence, honestly.

On the practical side: she will have the number in her call log. I would call it back from a different phone and record the call, and I would give the number to the police. They can trace who it is registered to. Even if they do not act on one call, a number tied to a dozen reports is something they can work with.

And no, do not make your son take his videos down. He did nothing wrong and it would not change much now.

Here is the order I would do it in, Rob, from someone who files these regularly.

1. Local police, today, even with no loss. Attempted fraud is still a crime, and the report creates a record. If they try again, and they often do, you want the paper trail started.
2. The FTC at ReportFraud.ftc.gov, if you are in the US. The FTC's alert on this exact scheme, "Scammers use AI to enhance their family emergency schemes", says a scammer needs only a short clip of a voice taken from content posted online, and tells you to report there.
3. An FCC consumer complaint about the call itself. The FCC ruled in 2024 that calls using AI-generated voices are "artificial" under the Telephone Consumer Protection Act, a hook that does not depend on money moving.
4. Her carrier's spam reporting route, with the number.
5. Her bank's fraud line, so a note is on the account before a second attempt.

None of these gets you the caller. Together they are how the pattern gets counted and acted on.

@Dan Okafor I would skip the call-back. The number your mother saw is almost certainly spoofed or a disposable internet line; it does not lead anywhere, and the police cannot trace it in the way television suggests. Calling it back from a different phone does two things, neither good: it confirms to the operation that the household is live and responsive, and it gives them another voice sample.

Preserve instead. Screenshot the call log with the time and the number as displayed, note what was said as exactly as your mother can recall, including the payment method they asked for, and keep any voicemail. That is what makes a report useful, and it costs nothing.

To Rob's question of whether a report is "just paperwork": partly, but it is paperwork with legal weight, and three things are worth saying.

First, the attempt is itself an offence. Fraud statutes do not require success, and the gift card request is a classic element. Second, the cloning has its own exposure in several US states, where recent statutes and right of publicity law reach unauthorised commercial or deceptive use of a person's voice. Which applies depends on where everyone sits, and a local prosecutor will know. Third, the FCC ruling Ingrid cited is aimed at automated calls; whether a live scammer playing clips falls squarely within it is arguable, so I would report it there anyway and let them sort the category.

Practically: have your mother write a dated statement now, while her memory is fresh, with what was said, what was asked, and how. Do the same for your son's timetable. Memories soften within a week; a statement does not. The deepfake legality thread has the broader map.

audio person here, and sorry Rob, that is a horrible afternoon. on the "take the videos down" question: it will not undo anything. the clips that exist have been scraped already if someone wanted them, and the FTC alert Ingrid linked says a short clip is enough, so two years of streams versus two weeks of streams does not change the maths. what I would do instead is talk to your son about it like the adult he nearly is. he will be furious, and that is useful, because the person most likely to warn the rest of the family about the next call is him.

the voice cloning thread has the gory detail on how little audio these systems need now.

Code word. We set one up after my father got the identical call, same car accident, same lawyer, same gift cards. One word the family agrees on, never written down, never said on a stream. If the caller cannot produce it, hang up, call back on the number you already have.

It is old-fashioned. It works. It also gave my father something to do with the anger, which he needed more than any report.

On the question nobody has asked yet, which is whether a detector could have told your mother the voice was fake: no, and it is worth being clear about that so no one buys a product off the back of this. In a live call there is no file to analyse and no time to analyse it. Even on a recording, phone-line compression is the hardest case for voice detectors, as the voice detector accuracy thread goes into. The defence that worked here was procedural, not technical: your mother stopped and called a number she already trusted. Lena's code word is the same idea with a shorter loop. Build the procedure, not the toolkit.

@Ingrid V. thank you, this is exactly the list I needed. Police first, then the FTC and FCC forms, then the carrier and the bank. I had assumed no loss meant no report. I will do all five tomorrow and have my mother sit with me for the statement Kwame mentioned.

@Kwame A. agreed on all three, and the dated statement is the single most useful thing Rob can do today. One addition from the receiving end: when you file, attach the statement as a document rather than typing it into the form's free-text box. The box gets truncated or summarised; the attachment travels intact to whoever eventually reads it.

One question that matters for the report, Rob, and for understanding how targeted this was. Did the caller use your son's name first, or did your mother say it? Scripts for this often open with "Grandma, it's me" and let the victim supply the name, which means the operation may not have known who they were calling at all and matched a generic young male voice to whoever answered. If the caller said his name unprompted, that points to a targeted clone from his streams and is a materially different report. Either way, write down which it was before the detail fades.

I am sorry this happened to your family, Rob. It happened to mine, in my home country, with my cousin's voice and a story about a hospital. The reporting route there was completely different from the FTC list above, and the only step that produced anything was the bank, because they put a flag on my aunt's account and stopped a transfer two days later when the callers tried again. So for anyone reading this outside the US: find your country's fraud reporting body, but do not skip the bank. The second call is the one the bank can stop.

@Priya N. good question, and I asked her. She says the caller said "Grandma, it's me, I'm in trouble," and she said his name. So they may not have known. That is somehow both a relief and worse. I will put it in the statement exactly like that.