AI-Generated Voice Purporting to Be Daughter Allegedly Used to Coerce $2,000 from Colorado Mother

In February 2025, a Colorado woman was targeted by a sophisticated extortion scam involving AI-generated voice cloning. Perpetrators impersonated her daughter to stage a fake kidnapping, coercing the victim into wiring $2,000 to Mexico. The victim was unable to recover the funds, and law enforcement could not trace the perpetrators.

In February 2025, a Colorado woman was scammed by a voice-cloning fraud in which criminals used what sounded like her daughter’s voice to stage a fake kidnapping. Under duress and believing her daughter was in danger, she wired $2,000 to Mexico. The scammers exploited generative AI to simulate the daughter’s voice and manipulated the victim psychologically. Law enforcement could not trace the perpetrators or recover the funds.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 4 Malicious actors
  • Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves scammers using AI voice-cloning technology to impersonate a family member and defraud the victim of $2,000.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The harm was caused by human scammers who intentionally used deployed generative AI voice-cloning technology to execute a fraudulent extortion scheme.

EU AI Act risk tier

  • Risk tier: 3 Limited Risk

Risk Level 3: The system involves AI-generated content such as deepfakes (voice cloning), which falls under the limited risk category requiring transparency obligations.

AI system and alleged parties

  • AI system: generative AI
  • AI purpose: Voice Generation
  • Behaviour type: Tool
  • Alleged developer: Unknown voice cloning technology developers
  • Alleged deployer: Unknown scammers operating in Mexico, Unknown scammers impersonating daughter of Linda Roan, Unknown scammers
  • Alleged harmed parties: Linda Roan, General public, Daughter of Linda Roan

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Negligible, indirect Negligible
  • Civil rights: direct Negligible, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Negligible, indirect Negligible
  • Psychological: direct Minor, indirect Negligible
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Psychological

Reported: The report explicitly describes severe psychological distress and fear experienced by the victim during the incident.

Directly caused: The victim experienced extreme fear, panic, and petrification during the call, believing her daughter was kidnapped.

Indirectly caused: The victim felt deeply embarrassed after realizing she had been fooled by the scam.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 1
  • People reportedly exposed: 1

Potential causes

Management

  • Rigid Fraud Liability Rules: Banks refuse refunds for authorized transfers, leaving victims helpless.

Technology

  • AI Voice Cloning: Generative AI clones voices with 85% accuracy using three seconds of audio.
  • Voice Synthesis Flexibility: AI easily approximates voices of any age, gender, or dialect.

Data Inputs

  • Public Voice Sharing: Users share voice clips online, providing source data for cloning.

Human Factors

  • Cognitive Hijack under Stress: Fear triggers fight-or-flight, suspending rational judgment.
  • Trust in Auditory Cues: Victim trusted the cloned voice, believing it was her daughter.

Process and Methods

  • No Identity Verification: No process existed for the victim to verify her daughter's safety.
  • Weak Transfer Fraud Checks: Money transfer services allowed rapid, irreversible transfers to Mexico.

Regulatory Environment

  • Lack of Voice AI Regulation: Absence of strict controls on generative AI voice cloning tools.
  • Jurisdictional Limitations: International money transfers make prosecution by local police unlikely.

Information quality

  • Classification confidence: High
  • Reason for confidence: The report clearly details the events of the scam, the specific financial loss ($2,000), and the psychological impact on the victim. The role of generative AI voice cloning is explicitly discussed as the enabling technology for the impersonation.
  • Ambiguities identified: The report does not specify the exact AI tool or platform used by the scammers to clone the voice.
  • Alternative interpretations: None. The incident is a straightforward case of AI-enabled financial fraud.

A localized AI-enabled voice cloning extortion scam targeted a US citizen, resulting in a $2,000 financial loss. While the incident caused individual distress, it represents a standard criminal exploit of commercial technology with negligible implications for national security.

  • Overall national security impact: Minor
  • Scope: Multiple nations
  • Primary target: United States
  • Other affected: Mexico
  • Alleged perpetrator: Unknown

Threat characteristics

  • Imminence: Long-term. The specific incident is resolved. It represents an ongoing strategic concern regarding AI-enabled fraud rather than an active national security crisis.
  • Autonomy: Human-controlled. The AI voice cloning tool was directly controlled and utilized by human scammers to execute the fraud.
  • Novelty: Established threat. AI voice cloning scams targeting individuals for extortion are an established threat with numerous documented cases.

Impact by dimension

  • Physical security: Negligible. The incident is a financial scam targeting an individual with no impact on physical infrastructure, kinetic weapons, or public safety.
  • Information security: Negligible. While it involves synthetic media, it is a localized criminal fraud case rather than a state-sponsored disinformation campaign or intelligence compromise.
  • Sovereignty: Negligible. No impact on state authority, electoral systems, or government decision-making processes.
  • Economic security: Negligible. The financial loss is limited to $2,000 from a single individual, presenting no threat to national economic or technological security.
  • Societal stability: Minor. Individual targeted by AI-enabled extortion, causing psychological distress and financial fraud, but manageable under standard domestic law enforcement procedures with no broader societal disruption.
Explore in the interactive Incident Tracker