In immediate danger? Call 000

Scam alert: Tax-time ATO and myGov impersonation texts are surging. The ATO never sends login links by text. See the current wave

Deepfakes and AI voice scams: what’s real now

7 min readReviewed October 2026 · Internet Safety Australia Editorial Team

In short

  1. AI can now clone a voice from seconds of audio — “it sounded exactly like them” proves nothing.
  2. The defence is old-fashioned: hang up, call back on the number you already have.
  3. Agree a family code word today. It beats every deepfake.

Two years ago, voice cloning was a curiosity. Now it needs only seconds of sample audio — from a voicemail greeting, a social media video, a podcast — to produce a convincing imitation. Deepfake video is improving just as fast. Here’s what that actually changes, and what it doesn’t.

The three scams already hitting Australians

  1. The fake family emergency

    “Mum, it’s me — I’ve been in an accident / arrested / robbed. I need money now, and please don’t tell Dad.” The voice sounds right because it is cloned from real audio. The panic is the point: it stops you verifying.

  2. The fake executive

    A voicemail or video call from “the CEO” or a supplier’s finance manager authorising an urgent payment or a bank-detail change. Businesses have lost six and seven figures to this pattern internationally.

  3. The fake celebrity investment

    Deepfake videos of well-known Australians endorsing investment platforms, spread through social media ads. The celebrities have nothing to do with it; the platforms are criminal fronts.

What hasn’t changed

Every AI scam still ends with the same asks: urgent money, secrecy, unusual payment methods, a link to click. The voice is new; the script is ancient. Which means the old defences still win — you just can’t skip the verification step anymore, because your ears can no longer do it for you.

Your three defences

  • Call back on the number you already have — never one supplied in the call or message
  • Agree a family code word for emergencies (something never posted online) — ask for it when a “family member” needs money urgently
  • Slow down any urgent payment at work: verify via a second channel, no exceptions for “the boss”
  • Be aware your social media videos are voice-cloning source material — another reason for private accounts
  • Treat celebrity investment ads as scams by default — check ASIC’s investor alert list via Moneysmart

Deepfakes are also used for image-based abuse

AI “nudify” tools and fake intimate images are a growing form of abuse, including against school students. Fake images count: eSafety’s image-based abuse scheme covers altered and synthetic intimate images, and creating or sharing them can be a crime. If it happens to you or your child, report to eSafety.

Common questions

Where to report this

Report to eSafety

Cyberbullying of children, adult cyber abuse, image-based abuse, and illegal or restricted online content.

Go to eSafety (leaves our site — official service)

Report to ReportCyber

Cybercrime: identity theft, online fraud, hacked accounts or devices, ransomware and online threats.

1300 CYBER1 (1300 292 371)

Go to ReportCyber (leaves our site — official service)

Report to Scamwatch

All types of scams — phishing, investment, romance, shopping, impersonation. Reports help track and disrupt scam activity.

Go to Scamwatch (leaves our site — official service)

Official sources for this guide

Reviewed October 2026 by Internet Safety Australia Editorial Team. Internet Safety Australia is independent and not a government website.