Could an AI Voice Scam Fool Your Front Desk?
Could a scammer use AI to fake my voice, or a vendor's, and trick my staff into sending money? Yes. The tools to copy a voice or write a perfect fake email are cheap and easy to use now, and small businesses are a natural target. The good news is the fix isn't expensive software. It's a simple verification habit your whole team follows every time money or passwords are involved.
October is Cybersecurity Awareness Month, so it's a good week to set that habit.
What the FBI numbers say
The FBI's Internet Crime Complaint Center (IC3) 2025 report logged just over 1 million complaints and about $20.9 billion in reported losses. Business email compromise alone, where a crook poses as a boss or vendor to redirect a payment, accounted for about $3 billion across 24,768 complaints.
AI now shows up in the numbers, too. The report counted 22,364 AI-related complaints with nearly $893 million in losses. It also describes "grandparent" style scams using cloned voices, and voice spoofing during fake online job interviews.
The FBI has been sounding this alarm for a while. In May 2025 it warned that scammers were sending AI-generated voice messages pretending to be senior U.S. officials. Its advice then works for any business: if a message claims to be from someone important, "do not assume it is authentic."
If criminals will fake a federal official, they'll fake a shop owner in Gastonia.
What an AI scam looks like at a small business
These scams work because they sound like normal Tuesday business:
Your bookkeeper gets a voicemail in your voice: "I'm stuck in a meeting, wire the deposit to this new account before 3."
A "vendor" emails that their bank changed and next month's invoice should go to a new account. The logo, the signature, the tone, all correct.
Someone calls the front desk claiming to be IT support and asks for the login code that just came in by text.
A new "client" sends a large check, then asks you to refund the difference by gift card or wire.
Twenty years as an NYPD sergeant taught me that a con runs on pressure. Rush the victim, and they skip the step that would have caught it. AI doesn't change that. It just makes the voice and the email more convincing.
Your 7-step scam-proof checklist for this week
None of this costs much. Most of it costs nothing.
1- Make "call back" the rule. Any request to send money, change bank details, or share a password gets verified by calling a number you already have on file. Never the number in the email or voicemail.
2-Set a family-style code word. Pick a word only your team knows, keep it out of email and texts, and use it to confirm urgent money requests by phone.
3- Lock down payment changes. A vendor's bank details only change after a phone confirmation with a known contact. Write that into your process.
4- Ask your bank for two approvers. Many banks can require a second person to approve outgoing wires or ACH payments, set transfer limits, and filter unexpected debits. Call and ask what yours offers.
5- Turn on multifactor authentication. Do it first on your business email, bank, and website domain account. Then tell staff: nobody legitimate will ever ask you to read them a login code.
6- Slow down on purpose. Teach your team that urgency is a red flag. "The boss said right now" is exactly what a scammer wants them to think.
7- Keep an emergency card. Write your bank's fraud line and your IT contact on paper. If a payment goes out by mistake, call immediately and report it at ic3.gov. Make it clear nobody gets in trouble for speaking up fast.
Use AI on your side, too
None of this means you should be afraid of AI. The same technology that scammers use can save your business hours every week on scheduling, follow-ups, and paperwork. My promise to clients is simple: make your business faster, better, and cheaper to operate.
The difference is control. When you bring AI in on purpose, with clear rules, it works for you. When you ignore it, someone else gets to decide how it touches your business.
A quick 15-minute team talk about these seven steps might be the most valuable meeting you hold this month.
Common questions
Can AI really copy someone's voice?
Yes. AI tools can now imitate a real person's voice, and the FBI's 2025 IC3 report describes scams that used cloned voices. Treat any urgent voice request for money as unverified until you call back.
What should I do if my business already sent money to a scammer?
Call your bank's fraud department right away and ask them to stop or recall the payment, then file a report at ic3.gov. Speed matters, so act the same day.
Do I need expensive software to protect my small business?
No. Call-back verification, a code word, two-person payment approval, and multifactor authentication close the gaps these scams depend on, and they cost little or nothing.
Let's make your business harder to fool.
If you want help putting these steps in place, or you want to see how AI can save your team time safely, let's talk. Book a free 30-minute AI Strategy Session with AIBYKA. We'll look at where your business is exposed and where AI can help, and leave you with a clear next step.
Visit ai-by-ka.com or email [email protected]. · 347-283-3072
Kelvin Alexander is President & CEO of AIBYKA LLC in Gastonia, NC, a retired NYPD Sergeant, and a Certified AI Consultant serving small businesses across the Charlotte metro.