How do you know when you're talking on the phone that the person you're talking to is actually you?
In early July, a Ferrari executive was bombarded with WhatsApp messages that appeared to be from his boss, Benedetto Vigna, the carmaker’s CEO. But the Ferrari executive didn’t recognize the number and couldn’t be sure it was really his boss.
A Ferrari executive, suspicious of the storm of messages from an unknown number, still called the person claiming to be Vigna. Despite the fact that the alleged CEO had Vigna’s southern Italian accent, the executive still felt something was off, so he asked the caller something that only Vigna would know: something the two had discussed privately a few days earlier.
“I’m sorry, Benedetto, but you need to identify yourself,” the executive said. And the call ended abruptly, averting a massive scam that, as Bloomberg reported earlier this year, could have been avoided.
If you think the Ferrari executive is a rare exception to the rule, think again. For as long as there have been phones, there have been people trying to trick you into thinking you’re someone else. Now, just like the Ferrari attempt, voice AI tools allow scammers to mimic someone’s voice and trick victims into thinking they’re talking to someone else.
All of these attacks involve a phone call, or receiving a phone call. When you receive a phone call, the scammer or fraudster may use tactics designed to pressure and coerce you into acting quickly and hastily in a stressful situation.
You've probably already heard of these scams.
Look, the police (or the federal government) won't call you and say “there's a warrant out for your arrest” or demand payment to quash the warrant. If there's a warrant out for your arrest, the police won't leave you a threatening voicemail. They'll come to your house.
It is unlikely that a healthcare provider will call you to ask for payment without first sending you a letter or paper bill. The FBI says healthcare fraud can affect anyone and can range from scammers impersonating healthcare providers to fraudulent claims of a balance on a nonexistent bill.
And, in fact, you should be wary of callers claiming to be from your bank, your employer, or an online technology company who call to “verify your personal information” or ask for a security code sent to your phone.
The alternative is to stop answering the phone. Wait, identify, and then answer.
Some scams are more advanced than others, including spoofing real-looking phone numbers on caller ID and using AI tools to manipulate a person’s voice. These are also known as “deepfakes.” Scammers often try to provoke a reaction or response by pretending to be a close family member in distress. Even if you think you know the person calling, there may be a reason why you’re not completely sure. Trust your instincts and be vigilant.
Consider Ferrari’s case, which was barely averted. In a phone call, a Ferrari executive asked the alleged CEO a question that only his real boss would know: the title of a book the two had been discussing a few days earlier. On a smaller scale, some friends and family members have agreed on a safe word or phrase that they can use if they need to prove that they are really who they say they are. (Taking it a step further, using a substitute phrase that victims use only when they are under duress can help alert others to unsafe or dangerous situations.)
If someone suddenly calls you and asks for your information, how can you know if they are actually legitimate? You can only rely on the caller's phone number, and you may not be able to recognize the number.
If your bank calls, call the number on your bank card to verify the identity.
If a company or organization you recognize calls you and asks for suspicious information, hang up and go to the organization’s website or official app and call them back directly. Don’t rely solely on Google searches, as scammers can trick search engines into displaying fake customer service numbers operated by scammers.
If you receive a call that someone has logged into one of your online accounts, go to the website or app for that online account and verify this yourself before taking any further action. Most companies, like Google or Facebook, do not make phone calls and rely on their official customer support portals.
Be like a Ferrari executive. Take a breath, think, take control of the situation, and the next time you get a call, just let it go to voicemail.
