Blindfy — Digital Protection

AI-cloned voice: the fake lawyer scam on an audio call

When the client calls to confirm and the "lawyer's" voice answers — except it's AI replicating public Instagram audio.

Audience: Professionals and Personal Brands · Risk level: CRITICAL

Blindfy Intelligence Unit · Technical review by Blindfy

Scenario

The client, suspicious of a WhatsApp message requesting Pix for a release order, calls the number on the screen. A voice identical to his lawyer's answers — because it is a deepfake generated from the firm's Reels and Stories.

How the scam works

Scammers download the lawyer's public videos (Instagram, TikTok, institutional YouTube). With 30 seconds of clean audio, open-source TTS models (ElevenLabs, OpenVoice) clone the voice with high fidelity. The criminal types the lines in real time and the client hears "the lawyer" authorizing the payment.

Common mistake

Trusting voice confirmation. In 2025 that was still circumstantial evidence; in 2026 it is an active attack vector.

Impact

The client loses more than in the written scam (on average 3-5x more, because the voice conveyed trust). The real lawyer's defense gets harder — the client swears he spoke with him. Risk of lawsuits and contract termination.

What works

A proactive "verification code" policy agreed at the start of the engagement (a passphrase the client uses to confirm it is the lawyer). A systematic footer: "we never confirm payments by audio". Periodic cleanup of public audio and audio watermarking in videos. Monitoring of mentions of the lawyer's name on audio platforms.

Protection checklist

  • Agree on a written verification code at the start of the engagement
  • Document the anti-deepfake policy in the initial proposal
  • Reduce exposure of the lawyer's clean audio on networks
  • Add an audio watermark to institutional videos
  • Train staff and clients on the vector
  • Commission forensic audio analysis in case of doubt
  • Connect Blindfy for continuous voice-use monitoring

Editorial sources

Your voice is worth a lawsuit. Treat it as a critical asset, not marketing content.

← All risk analyses · Blindfy initial assessment