Podcast Episode

Ghost Signal: How AI Turned the Voices You Trust Into a Weapon

The OPSEC Podcast

Episode 28Sep 21, 202621 min

1Transcript1 turns · 21 min

AP
Alan Pace0:00

On a Wednesday in July of last year, Sharon Brightwell picked up her phone in Dover, Florida and heard her daughter crying. She was hysterical. She said she'd been texting while driving and had hit a pregnant woman. The police had taken her phone, she was in serious trouble, and she needed help. And then a man came on the line. He said he was April's public defender. She was being held, bail was $15,000, had to be cash. He gave Sharon very specific instructions, including this one. Do not tell the bank what the money is for, because it could affect your daughter's credit. So Sharon went to the bank, withdrew $15,000. and handed it to the courier who came to her house to pick it up. And then the phone rang again. The pregnant woman had lost her baby. The family of that woman, the caller said, was willing to drop their lawsuit, but it would cost another $30,000 cash. And that second call... is where this whole thing came apart. Someone in the family sensed something was off, and they got the real April on the phone. She was at work. She had been at work the entire time. She had not been in an accident, she had not been arrested, and she had never made that call. Here's what Sharon told reporters after this incident. She said, "'There is nobody that could have convinced me "'that it wasn't her. "'I know my daughter's cry.'" And she was right. She did know her daughter's cry. And that's exactly what the attackers were counting on. The voice on the phone was an AI clown, built from the kind of short audio clip most of us have sitting on social media accounts right now. Today we're talking about how AI broke one of the oldest trust signals that we have, the sound of a voice that you know, and the simple protocol that beats it for free. I am Alan Pace, and this is the OPSEC Podcast. The threat that we're talking about today is called social engineering. Social engineering is as old as lying. Con artists, spies, and scammers have always worked the same angle. Get a person to trust you, then get them to act against their own best interests before they stop to think. What held that back was the skill involved in working the person. A convincing con took research, practice, and a good ear. Impersonating a specific person's voice was close to impossible. Writing a believable message in someone else's voice took real effort, and most scammers didn't bother. Which is why, for years, the advice was simple. Look for the typos, the strange grammar, the broken English, the stranger with an urgent request. AI has removed that skill requirement. The research, the writing, and the voice can all be automated now. And here's what that looks like in numbers. Back in 2023, McAfee's research found that three seconds of audio was enough to produce a voice clone with roughly an 85% match to the original. The same survey found that one in four adults had either experienced an AI voice scam or knew someone who had, and 70% weren't confident that they could tell a cloned voice from the real thing. And the tools have only gotten better. In March of 2025, Consumer Reports tested six of the major commercial voice cloning services. Four of them had no meaningful technical

2Episode notes

# Ghost Signal: How AI Turned the Voices You Trust Into a Weapon
For your whole life, a familiar voice has been proof of identity. A few seconds of audio from a social media clip is now enough to clone the voice of someone you love, and many cloning tools ask for little more than a name and an email address. This episode breaks down how AI-powered social engineering attacks get built, the three plays aimed at everyday people, and the free, low-tech protocol that beats all of them.
## In This Episode
- What actually changed: AI removed the skill barrier from impersonation, and why "look for the typos" is now dangerous advice.
- The assembly line: reconnaissance, pretext, voice clone, stacked channels, and manufactured urgency.
- The three plays that do most of the damage: the family emergency call, the fake bank fraud call that asks for your code, and the message that knows your life.
- How deepfake video is used to override a target's own suspicion.
- Why the FBI now tells families to set up a secret word.
- Why your family's public posts work as source material, and the military discipline of emissions control.
## Key Takeaways
- A familiar voice or face is no longer proof of identity. Trust needs a protocol.
- Every one of these attacks depends on urgency and on keeping you inside the attacker's conversation. Step outside it and the attack falls apart.
- An AI can clone

Showing a preview — retrieve the full transcript via the Exa API.

Powered by the Exa API

See something wrong or missing on this page?