Personal Privacy & Data Protection

Imagine the call. A daughter's voice, completely unmistakable. She has been in a car accident in another state, and she needs help wiring money to a hospital. The voice on the line is begging, terrified, and fast.

But the voice is not real. It was generated by AI software trained on three seconds of audio pulled from any number of sources, and anyone can rent the tool for under $30 a month.

This is no longer hypothetical. It is the new shape of the threats to our security, and it is exactly the kind of thing we built GenSphere Connections to help our clients navigate.

What is happening with fraud

The landscape has shifted faster in the past two years than it did in the previous twenty. A few tactics are worth knowing about.

AI voice cloning. With as little as three seconds of audio, often pulled from a podcast, an event speech, or a social video, a scammer can hold a convincing real-time conversation in a loved one's voice. The FBI issued a formal warning about this in 2024, and reported incidents have climbed steadily since.

"Pig butchering" scams. A wrong-number text, a friendly apology, weeks of pleasant conversation, and eventually an introduction to a "foolproof" investment, usually crypto. These slow-built relationships are run by sophisticated international networks and have produced some of the largest individual financial losses we have seen reported.

Phishing 2.0. Generative AI has erased the broken English and obvious typos that once made phishing easy to spot. Modern attempts mirror your tone, reference recent events in your life, and arrive from an address one character different from the real one.

Identity exposure. Your name, date of birth, address, and Social Security number are almost certainly already on the dark web, exposed in one of the dozens of major breaches of the past decade. The question is no longer whether your information has been compromised. It has been. The question is whether you have put the right defenses in place so the exposure does not lead to injury.

Anything that demands a decision in the next ten minutes is almost certainly a scam.

Four ways to protect yourself

Across every conversation we have had with cybersecurity professionals in our network, the same four ideas come up.

Assume the perimeter is broken. Do not try to keep your information off the internet; that ship has sailed. Instead, make the information useless to anyone who has it. Frozen credit, isolated email accounts, and unique passwords keep a breach in one place from cascading into a catastrophe.

Verify always. If a call, text, or email asks you to do anything that costs money or shares information, hang up and verify through a separate channel. A real bank will not mind if you call back. A real family member in distress will understand if you ask an agreed-upon question or a safe word.

Slow down. Almost every successful scam relies on urgency. A hospital will treat your loved one before you wire funds. The IRS will not arrest you in the next hour. Anything that demands a decision in the next ten minutes is almost certainly a scam.

Decide in advance. The middle of a phishing attempt is the worst possible moment to design your defense. Establish the safe word before the deepfake call comes. Freeze your credit before a breach. Build your trusted-advisor list before someone calls pretending to be one.

Solid lines of defense

A short list of practical defenses worth completing sooner rather than later.

• A family safe word. A phrase only your immediate family knows, used to verify any emergency request involving money or sensitive information. Choose something not findable anywhere in your public life.
• A dedicated email address. For banking, investment, and legal accounts only, never used to subscribe, register, or shop. If unsolicited mail ever arrives there, you will know immediately that something is wrong.
• A credit freeze at all three bureaus. Equifax, Experian, and TransUnion. It is free, takes about ten minutes total, and is the single most effective defense against new-account identity theft. You can lift it online whenever you need to.
• Passkeys instead of passwords. Wherever they are offered, with a reputable password manager everywhere else. Long, unique passwords for every account, never reused.
• A quarterly phone-settings review. After every major iOS or Android update, default permissions can quietly shift. Ten minutes reviewing app tracking, location, and notification settings goes a long way.
• A digital "what if" document. Stored securely and known to one trusted person, listing the accounts, advisors, and recovery contacts a family member would need if something happened to you.

Staying safe

The clients who navigate these threats most successfully are not the most technologically sophisticated. They are the ones who have built habits of calm. They pause before clicking. They verify before transferring. They have a family safe word, and they know how to use it. They treat the digital perimeter the way a previous generation treated the front door: closed by default, opened deliberately.

If any of this raises a question about your own setup, your family's, or the right specialist to bring into the conversation, that is exactly what GenSphere Connections is for. Send us a note. We have the people and the resources, and we are glad to make the introduction.

Paulina Hazen leads GenSphere Connections.

Sources

• Federal Bureau of Investigation, public alert on AI-enabled voice cloning and fraud (2024).
• FBI Internet Crime Complaint Center (IC3), reporting on cryptocurrency-investment ("pig butchering") fraud.
• Federal Trade Commission, consumer guidance on imposter and investment scams.
• AnnualCreditReport.com and the three nationwide credit bureaus (Equifax, Experian, TransUnion), credit-freeze instructions.

References to third-party tools, services, or providers are not endorsements.