Spelling mistakes used to be the giveaway. That era is over. Here is what still works, and it has nothing to do with looking closely at the message.
For twenty years we taught people to spot the bad grammar, the strange address, the blurry logo. Artificial intelligence removed all of it. The email is now perfect. The website is a pixel-accurate copy. The voice on the phone is your daughter's voice.
So the check has to move. You cannot verify the message by looking at the message. You verify it by going around it.
Never verify something using the contact details that arrived with it. Not the number in the text, not the link in the email, not the button in the app notification.
Hang up and call back on the number you already had. Open the bank app yourself instead of clicking. Type the address by hand. It takes forty seconds and it defeats almost everything, because the whole scam depends on you staying inside the channel they control.
Cloning a voice takes a few seconds of audio. Anybody who has posted a video is cloneable, which is nearly everybody.
The tell is never the voice. It is the shape of the call. Urgency, secrecy, and a request that has to happen now. An accident, an arrest, a lawyer, a payment in the next ten minutes, and do not tell anyone.
Agree a word with your family. One word, chosen offline, never written anywhere. If the voice cannot say it, the voice is not them. It sounds childish until the day it saves someone sixty thousand euros.
And the same at work. If a message from the chief executive asks for an urgent transfer, the answer is a phone call on the internal line, every time, whoever it is. Companies that made this a rule stopped losing money. Companies that made it a suggestion did not.
A famous face recommending an investment is not evidence of anything. It costs almost nothing to produce now, and my own face has been used for this more than once.
The check again is not visual. No serious investment is offered to you through a social media advert with a countdown. No public figure will personally manage your savings in a chat. If the money has to move fast, that speed is the product.
Do not spend the evening being ashamed. These things are built by professionals to work on intelligent people under pressure, and shame is exactly what keeps victims quiet long enough for the money to disappear.
Call your bank immediately, ask them to block and recall the transfer, and report it to the police. Hours matter. Then tell somebody, because the next person in your family is the next target.
I cover new cases as they appear, in video and writing, on this site and on the Artificial Decisions series.
How can I recognise an online scam in 2026?
Stop looking for mistakes in the message, because artificial intelligence removed them. Verify through a channel that did not arrive with the message: call back on a number you already had, open the app yourself, type the address by hand. The scam only works while you stay inside the channel the scammer controls.
How do I know if a phone call uses a cloned voice?
You cannot tell from the voice, and you should stop trying. Look at the shape of the call: urgency, secrecy, and money that has to move immediately. Agree a private word with your family offline, and hang up and call back on your own number when anything feels rushed.
A famous person is recommending an investment in a video. Is it real?
Almost certainly not. Deepfake investment adverts using well known faces are one of the most common frauds, and my own face has been used for them. No public figure will manage your savings through a chat, and no legitimate investment needs you to decide in the next ten minutes.
What should I do right after falling for a scam?
Call your bank at once and ask them to block and recall the payment, then report it to the police. Speed matters more than anything else. Do not stay silent out of embarrassment: these attacks are engineered by professionals to work on intelligent people.
Is a safe word with the family really useful?
Yes. It is the only check that a cloned voice cannot pass, and it costs nothing to set up. Choose it in person, never write it down, and use it whenever a call asks for money or secrecy.
Also: keynote speaking on AI and AI training for companies.
Marco Camisani Calzolari. Strategic advisor on artificial intelligence, cybersecurity and digital risk. Based in New York. Full biography, writing and video, contact. Italian site: camisanicalzolari.it.