Wearing an identity you already trust.
Familiarity is borrowed trust. Rather than build a relationship, the operator occupies one that already exists.
A message from a friend's compromised account arrives inside a thread you have used for years. A brand's logo carries a thousand prior interactions. A cloned voice on a phone call is recognised before it is evaluated, because recognition is faster than judgement and does not consult it.
Voice cloning has made this materially more dangerous. A few seconds of audio, which social media supplies freely, is enough to produce a convincing approximation of a specific person. The grandparent scam is not new; the production quality is.
The same lever runs through brand impersonation, a support account one character different from the verified one, a delivery notification from a carrier you use weekly, and a login page identical to the real thing.
What defeats it is not perception, which is exactly what is being attacked, but channel. Contact the person or organisation using details you already held, on a channel you initiated. A familiar voice on an unfamiliar number is answered by calling the familiar number back.
For families, an agreed phrase known only to them, asked on any distressed call, defeats voice cloning completely and costs nothing to set up.
Work in fraud or financial crime?
See what Flggd shows institutions