A Familiar Voice Is No Longer Proof: Defending Your Bank's Phone Line Against Deepfakes

The call comes in mid-afternoon. The voice on the line belongs to a longtime customer, someone your staff has spoken with for years. She's traveling and needs to update the phone number on her account before a wire goes out.

Everything sounds right. The problem is that it may not be her.

AI voice cloning can now copy a person's voice from a few seconds of audio taken from a voicemail greeting, a social media video, or a recorded phone call. For community banks, whose service is built on knowing customers by name and by voice, that creates a new kind of risk.

The numbers behind the threat

The ABA Banking Journal recently brought together industry data on voice fraud in banking:

• Voice fraud in banking rose roughly 30% in 2025.
• Synthetic-voice attacks against financial institutions jumped about 20 times over in 2024 compared to the year before.
• About 1 in 750 banking calls was flagged as potentially fraudulent.
• Roughly 85% of consumers no longer answer calls from unknown numbers.

The authors also note that detection tools lose accuracy under everyday phone conditions, such as background noise and compressed audio. Even technology built to catch fakes can't rely on the voice alone.

Why community banks are a target

Relationship banking is a community bank's strength. Customers expect to call and reach someone who knows them. But fraudsters know that a familiar voice lowers defenses, and a smaller team means fewer layers between a convincing caller and a completed transaction.

The Independent Community Bankers of America has warned about this directly. As ICBA's Independent Banker puts it, "The proliferation of AI-enabled fraud and scams has the potential to erode the relationships between community banks and their customers."

The tools behind these attacks are cheap and widely available. A scheme that once took real skill can now be run by almost anyone.

The other half of the problem: your real calls go unanswered

Voice fraud doesn't only affect inbound calls. When 85% of consumers ignore unknown numbers, your bank's legitimate calls get ignored too. That includes fraud alerts, callback verifications, and loan officer follow-ups.

That's a dangerous gap. If customers can't tell your real calls from a scammer's, they may ignore the fraud alert that matters, or trust a spoofed call that uses your name. Protecting your outbound caller identity with STIR/SHAKEN Attestation A helps your calls show as verified.

Verify the person, not the voice

No single tool stops voice fraud. The ABA authors recommend combining voice signals with behavioral cues and transaction context rather than relying on voice alone. At the phone line, that layered approach looks like this:

1. Verify out of band with one-time password (OTP) verification. Before an account change or high-risk transaction, send a one-time code to the phone number or device already on file. A cloned voice can't receive a code sent to the real customer's device.
2. Set clear triggers. Require verification for the requests fraudsters target most: changes to contact information, password resets, new payees, and wire or ACH transfers.
3. Train staff to slow down. Urgency is a red flag. Give tellers and call center staff a script and the authority to say "Let me verify that first," even with a voice they recognize.
4. Call back on a known number. If something feels off, hang up and call the number on file, not the one the caller provides.
5. Record and review calls. Call recordings create an audit trail for investigations and give you real examples to train with.
6. Protect your own caller ID. Make sure customers can trust it when your bank calls them.

Where to start

ICBA recommends starting with your highest-risk areas: wire transfers, account takeovers, and small business accounts. It also stresses keeping people at the center. Technology should support your staff's judgment, not replace it.

There's an upside, too. Every new verification step is a chance to show customers you're protecting them, and to remind them that your bank will never ask them to share a code.

Protect the relationships you've built

Your customers trust your bank because they know the people behind it. Voice fraud tries to turn that trust into a weakness. With OTP verification built into your phone and customer service workflows, your team can confirm who's really on the line in seconds, without making loyal customers feel like suspects.

Ready to add a verification layer to your phone line? Talk to the Verge team about OTP verification.