The three-second voice clone: AI fraud and your front desk

A cloned voice and an AI-written email both count on a helpful person acting fast. The answer isn’t a product. It’s a one-page office policy that makes the slow step the normal step, so nobody has to be brave to use it.

The one-page office policy

This is the page we leave on the wall where payments get approved. Give each rule one named owner when you print it: payments belong to the bookkeeper, with you as second approval.

Two details make it work. The callback number never comes from the email or call that asked. And a business AI plan that doesn’t train on your data may hold business information; even there, draft with the identifiers out.

Florida’s notice duty covers any business that stores residents’ personal information, whatever its size. Skipping notice takes a documented investigation with law enforcement, kept five years (Florida Statutes 501.171).

The BAA line is HIPAA’s: consumer chat apps generally can’t sign one (AccountableHQ). Barnes Walker, a Florida law firm, gives Realtors the same advice on client information (Barnes Walker).

How these scams reach a small office

Trend Micro, citing McAfee research, says as little as three seconds of audio makes a usable clone (Trend Micro). So the policy never relies on recognizing a voice. The attempts take three shapes:

• The owner’s voice, calling the bookkeeper. A hurried Friday call: a vendor needs paying today, here are new bank details. The clip came from a voicemail greeting or a video on your site.
• The email that changes wire instructions. A supplier writes the day before a payment, names and deal correct. The FBI calls this business email compromise and names voice cloning as one of its tools (Mezha).
• The caller asking for records. A “spouse” or a “buyer” wants a file sent to a new address.

The FBI also flags cloned voices in distress scams (AI Weekly), and the count covers only filed complaints.

Owners already take it seriously. Data security was the top barrier to using AI more in Bluevine’s survey of 942 owners, at 33%, up from 23% (Bluevine); the SBE Council put it at 42%, second only to accuracy (SBE Council). The page above is the practical answer.

The first hour, if one gets through

Rule six, in order. Whoever notices starts it; speed matters more than fault.

The same rules, built into your systems

Paper is the floor. Your systems can hold the same rules, so nobody has to remember them on a Friday.

• Approval before money. The AI follow-up, from $1,500, chases invoices and never changes a payee or releases a payment. Anything we build that touches money stops at a human approval.
• Assistants that can’t act on records. An AI employee that answers from your documents sends record requests to a named person and never changes a record itself.
• Training that starts here. AI team workshop, from $1,000 for half a day with up to ten people, opens with this policy.

One step stays human: the verification call. A person makes it, to a number a person wrote down when the relationship began. Clinics may also want what an AI front desk can do in a medical or dental office.

Print the page this week and read it aloud with whoever pays the bills, code word included, and split approving a payment from sending it if one person does both. That conversation is most of what keeps your office safe.