Purported AI-Generated Voice Reportedly Impersonated Washington Man's Daughter in $13,000 Extortion Scam

A man in Washington state, Mark A. Young, reportedly wired $13,000 after scammers used a purportedly AI-generated copy of his daughter's voice to convince him she had been kidnapped after a staged car-crash story. The caller allegedly kept him on the phone for about 30 hours, directed him to banks and money-transfer locations, and sought another $17,000 before a Pullman bank manager and police confirmed his daughter was safe.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved scammers using an AI voice clone to impersonate a family member and execute a targeted extortion scam for financial gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by human scammers who intentionally deployed a voice-cloning AI tool to extort money from the victim.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Risk Level 3: Limited Risk. The report describes the use of AI-generated content such as deepfakes (specifically, a synthetic voice clone), which falls under limited risk transparency obligations.

AI system and alleged parties

• AI system: None named
• AI purpose: Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers, Unknown deepfake technology developers
• Alleged deployer: Unknown scammers
• Alleged harmed parties: Mark A. Young, General public, Daughter of Mark A. Young

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Minor, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Minor, indirect Minor
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: Yes, the report describes a total financial loss of $13,000 for the single occurrence.

Directly caused: The victim was defrauded of $13,000, which he wired to the scammers in multiple transactions. The average loss per occurrence was $13,000.

Malicious content

Reported: Yes, the report describes the creation of a malicious voice clone used to deceive the victim.

Directly caused: The scammers generated a highly realistic voice clone of the victim's daughter crying and pleading for help to facilitate the extortion.

Psychological

Reported: Yes, the report explicitly describes severe emotional distress and panic experienced by the victim.

Directly caused: Mark A. Young experienced extreme panic, helplessness, and trauma during the 30-hour ordeal, stating it 'almost broke me' and took days to feel normal.

Indirectly caused: The victim's family, including his wife and daughter, experienced significant distress and worry upon learning of the elaborate extortion scheme.

People affected

• Occurrences reported: 1
• People reportedly harmed: 2
• People reportedly exposed: 2

Potential causes

Technology

• Highly Accurate Voice Cloning AI: AI program accurately mimicked daughter's speech pattern to deceive father.
• Caller ID Spoofing and Multiple Lines: Scammers used multiple untraceable phone numbers to maintain contact.

Data Inputs

• Unprotected Voice Recordings: Scammers obtained and used a recording of the daughter's voice to train AI.

Human Factors

• Cognitive Overload and Panic: Extreme emotional distress prevented rational verification of the situation.
• Lack of Family Safe Word: The family lacked a pre-arranged phrase to verify identity in emergencies.
• Deceptive Social Engineering: Scammers exploited paternal instincts and fear to bypass skepticism.

Process and Methods

• Irreversible Financial Transfers: Wire transfers and cash pickups allowed rapid, non-recoverable loss.
• Continuous Call Requirement: Scammers forced continuous calls to prevent contacting others or police.
• Inadequate Telecom Verification: No automated systems to flag or block synthesized voice traffic.

Regulatory Environment

• Lack of Voice Cloning Regulations: Absence of legal controls on commercial voice replication software access.
• Weak Telecom Spoofing Controls: Regulatory gaps allow scammers to easily spoof and rotate phone numbers.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides a highly detailed, first-hand narrative of the extortion event, including specific financial losses ($13,000), locations, and timelines. The role of the AI voice clone is clearly defined as the primary mechanism of deception.
• Ambiguities identified: The specific AI software used and the method by which the scammers obtained the daughter's voice recording are not identified.

A retired police officer in the US was extorted of $13,000 in a sophisticated 30-hour scam utilizing an AI-generated voice clone of his daughter. The incident highlights the growing threat of AI-enabled voice impersonation for targeted fraud. While deeply traumatic for the victims, the national security impact is minor and manageable through standard local law enforcement and financial security procedures.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. While the specific incident is resolved, AI-enabled voice cloning represents an ongoing, long-term strategic concern for law enforcement and public trust.
• Autonomy: Human-controlled. The AI voice-cloning system was utilized strictly as a tool by human scammers who directed the extortion plot and controlled the interactions.
• Novelty: Evolved capability. The incident represents an evolved capability where scammers combined realistic AI voice cloning with a highly coordinated, multi-hour psychological extortion scheme.

Impact by dimension

• Physical security: Negligible. No threat to physical systems, critical infrastructure, or human safety was identified in this localized financial scam.
• Information security: Negligible. The incident was a targeted criminal extortion attempt against an individual, not a systematic information warfare or intelligence compromise operation.
• Sovereignty: Negligible. No government decision-making, electoral systems, or core state sovereignty functions were impacted by this incident.
• Economic security: Negligible. While the victim suffered a personal financial loss of $13,000, this does not represent a threat to national economic stability or strategic technological security.
• Societal stability: Minor. Representing a minor threat, this incident demonstrates how AI-enabled voice cloning can be used for targeted psychological trauma and fraud, manageable by local law enforcement.