AI Voice Scam Allegedly Defrauds Game and Coffee Store in Havre, Montana

A Montana business, Sugar and Dice, was reportedly targeted by an AI voice scam that cloned the store owner's voice to deceive an employee over the phone. The scammer allegedly spoofed both the owner's and the employee's phone numbers, making the call appear legitimate. Believing he was following his employer’s instructions, the employee unknowingly compromised financial details. The store suffered monetary losses but plans to recover.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved a scammer using AI voice cloning to impersonate a business owner and defraud an employee, which directly constitutes fraud and targeted manipulation for financial gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by a human scammer intentionally using a deployed AI voice replication tool to defraud a business.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system used is an AI-generated content system (deepfake/voice clone), which falls under transparency obligations where users should be informed they are interacting with AI, though in this malicious context it was used to deceive.

AI system and alleged parties

• AI system: AI voice replication
• AI purpose: Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown voice cloning technology developers
• Alleged deployer: Unknown scammers
• Alleged harmed parties: Sugar and Dice employee, Sugar and Dice, Kevin Zorn

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Privacy

Reported: Yes, the report notes that the scammer compromised the store's bank details and obtained the personal cell phone numbers of both the owner and the employee.

Directly caused: The scammer obtained and used the personal cell phone numbers of the owner and employee, and subsequently compromised the store's bank details.

People affected

• Occurrences reported: 1
• People reportedly harmed: 2
• People reportedly exposed: 2

Potential causes

Management

• Inadequate Security Training: Management did not train staff on voice cloning and social engineering.

Technology

• AI Voice Replication: AI synthesized owner's voice accurately to trick the employee.
• Caller ID Spoofing: Scammers spoofed owner's phone number to bypass suspicion.

Data Inputs

• Compromised Cell Numbers: Scammers obtained personal cell numbers of both owner and employee.
• Voice Data Harvesting: Scammers gathered owner's voice samples to train the AI model.

Human Factors

• Trust in Voice Identity: Employee trusted the replicated voice, believing it was the owner.
• Deceptive Urgency: Employee followed instructions due to mention of a warrant.

Process and Methods

• Lack of Verification Protocol: No verification process existed for handling sensitive financial requests.

Regulatory Environment

• Weak Spoofing Protections: Lack of strict telecom regulations allowed caller ID spoofing.
• Unregulated Voice Synthesis: Absence of regulatory controls on commercial AI voice cloning tools.

Information quality

• Classification confidence: High
• Reason for confidence: The report clearly describes the scam mechanism (AI voice replication), the parties involved, and the resulting financial and privacy impacts. While the exact financial loss amount and the specific AI model are not named, the nature of the incident and its classification are unambiguous.
• Ambiguities identified: The specific AI voice cloning software used and the exact amount of financial loss are not specified.
• Alternative interpretations: None. The incident is a straightforward case of voice-clone-enabled financial fraud.

A localized financial scam in Montana utilized AI voice cloning to impersonate a business owner and defraud a retail employee. This incident represents a common commercial cybercrime with negligible national security implications, illustrating the consumer-level accessibility of deepfake audio tools rather than a coordinated threat to national infrastructure or sovereignty.

• Overall national security impact: Negligible
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The specific incident is resolved, representing an ongoing strategic trend of consumer-grade AI fraud rather than an active national security crisis.
• Autonomy: Human-controlled. The AI voice cloning system acted as a tool directly controlled and deployed by a human scammer to execute the fraud.
• Novelty: Established threat. AI-enabled voice cloning for financial scams is an established threat method with numerous documented occurrences.

Impact by dimension

• Physical security: Negligible. Local commercial fraud with no impact on physical infrastructure, kinetic operations, or human safety.
• Information security: Negligible. The incident is a localized financial scam targeting a small business, with no involvement of state actors or systematic disinformation campaigns.
• Sovereignty: Negligible. No impact on government functions, state authority, or sovereign decision-making processes.
• Economic security: Negligible. The financial loss is restricted to a single local business with no systemic risk to national financial institutions or strategic industries.
• Societal stability: Negligible. Isolated incident of fraud with no large-scale threats to societal stability, civil liberties, or population safety.