In February 2025, a Colorado woman was targeted by a sophisticated extortion scam involving AI-generated voice cloning. Perpetrators impersonated her daughter to stage a fake kidnapping, coercing the victim into wiring $2,000 to Mexico. The victim was unable to recover the funds, and law enforcement could not trace the perpetrators.
In February 2025, a Colorado woman was scammed by a voice-cloning fraud in which criminals used what sounded like her daughter’s voice to stage a fake kidnapping. Under duress and believing her daughter was in danger, she wired $2,000 to Mexico. The scammers exploited generative AI to simulate the daughter’s voice and manipulated the victim psychologically. Law enforcement could not trace the perpetrators or recover the funds.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident involves scammers using AI voice-cloning technology to impersonate a family member and defraud the victim of $2,000.
Causal factors
- Entity: Human
- Intent: Intentional
- Timing: Post-deployment
The harm was caused by human scammers who intentionally used deployed generative AI voice-cloning technology to execute a fraudulent extortion scheme.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Risk Level 3: The system involves AI-generated content such as deepfakes (voice cloning), which falls under the limited risk category requiring transparency obligations.
AI system and alleged parties
- AI system: generative AI
- AI purpose: Voice Generation
- Behaviour type: Tool
- Alleged developer: Unknown voice cloning technology developers
- Alleged deployer: Unknown scammers operating in Mexico, Unknown scammers impersonating daughter of Linda Roan, Unknown scammers
- Alleged harmed parties: Linda Roan, General public, Daughter of Linda Roan
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Minor, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Psychological
Reported: The report explicitly describes severe psychological distress and fear experienced by the victim during the incident.
Directly caused: The victim experienced extreme fear, panic, and petrification during the call, believing her daughter was kidnapped.
Indirectly caused: The victim felt deeply embarrassed after realizing she had been fooled by the scam.
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 1
Potential causes
Management
- Rigid Fraud Liability Rules: Banks refuse refunds for authorized transfers, leaving victims helpless.
Technology
- AI Voice Cloning: Generative AI clones voices with 85% accuracy using three seconds of audio.
- Voice Synthesis Flexibility: AI easily approximates voices of any age, gender, or dialect.
Data Inputs
- Public Voice Sharing: Users share voice clips online, providing source data for cloning.
Human Factors
- Cognitive Hijack under Stress: Fear triggers fight-or-flight, suspending rational judgment.
- Trust in Auditory Cues: Victim trusted the cloned voice, believing it was her daughter.
Process and Methods
- No Identity Verification: No process existed for the victim to verify her daughter's safety.
- Weak Transfer Fraud Checks: Money transfer services allowed rapid, irreversible transfers to Mexico.
Regulatory Environment
- Lack of Voice AI Regulation: Absence of strict controls on generative AI voice cloning tools.
- Jurisdictional Limitations: International money transfers make prosecution by local police unlikely.
Information quality
- Classification confidence: High
- Reason for confidence: The report clearly details the events of the scam, the specific financial loss ($2,000), and the psychological impact on the victim. The role of generative AI voice cloning is explicitly discussed as the enabling technology for the impersonation.
- Ambiguities identified: The report does not specify the exact AI tool or platform used by the scammers to clone the voice.
- Alternative interpretations: None. The incident is a straightforward case of AI-enabled financial fraud.
A localized AI-enabled voice cloning extortion scam targeted a US citizen, resulting in a $2,000 financial loss. While the incident caused individual distress, it represents a standard criminal exploit of commercial technology with negligible implications for national security.
- Overall national security impact: Minor
- Scope: Multiple nations
- Primary target: United States
- Other affected: Mexico
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The specific incident is resolved. It represents an ongoing strategic concern regarding AI-enabled fraud rather than an active national security crisis.
- Autonomy: Human-controlled. The AI voice cloning tool was directly controlled and utilized by human scammers to execute the fraud.
- Novelty: Established threat. AI voice cloning scams targeting individuals for extortion are an established threat with numerous documented cases.
Impact by dimension
- Physical security: Negligible. The incident is a financial scam targeting an individual with no impact on physical infrastructure, kinetic weapons, or public safety.
- Information security: Negligible. While it involves synthetic media, it is a localized criminal fraud case rather than a state-sponsored disinformation campaign or intelligence compromise.
- Sovereignty: Negligible. No impact on state authority, electoral systems, or government decision-making processes.
- Economic security: Negligible. The financial loss is limited to $2,000 from a single individual, presenting no threat to national economic or technological security.
- Societal stability: Minor. Individual targeted by AI-enabled extortion, causing psychological distress and financial fraud, but manageable under standard domestic law enforcement procedures with no broader societal disruption.