Deepfake vs voice cloning: voice cloning copies how a real person sounds. A deepfake is the wider term for any AI-faked likeness of a real person, whether that’s video, a photo or audio. So a voice clone is one kind of deepfake, the audio-only kind.
The difference matters in practice because they need very different effort. A usable voice copy can come from a short public clip. Faking a whole live video meeting is far harder, which is why voice-only attacks show up more often.
| Voice cloning | Deepfake (video) | |
|---|---|---|
| What’s faked | Someone’s voice | Someone’s face and often voice too |
| Raw material needed | Recordings of them talking | Video footage, plus audio |
| Typical channel | Phone call, WhatsApp voice note | Video call, social media ad |
| A case from this library | UK energy firm (2019): €220,000 wired after one call | Arup (2024): about US$25.6 million after a fake video meeting |
| What stops it | Call back on a known number | The same: call back on a known number |
Key takeaways
The first widely reported criminal use came in March 2019. The boss of a UK energy company took a call that sounded exactly like the chief executive of its German parent, and wired €220,000 to a Hungarian account. The insurer, Euler Hermes, said AI-cloned audio was behind it. See the UK energy firm case and the voice cloning page.
It doesn’t always work. In 2024, LastPass’s CEO was cloned and used over WhatsApp to reach an employee, who noticed the odd channel and the pressure, ignored it and reported it. See the LastPass case.
Arup is the extreme example. According to Hong Kong police, a finance employee joined a video conference where every other person was AI-generated from public footage, then made 15 transfers worth HK$200 million.
Not every “deepfake” is fully generated, either. In Singapore in 2026, scammers built a fake Zoom “government meeting” out of genuine YouTube clips of the prime minister and officials, with new speech laid over the top. A businessman sent at least S$4.9 million. See the Singapore case.
Tip: if a senior person’s voice or face reaches you on a channel they don’t normally use, assume nothing about who it is until you’ve called back.
Vishing is the phone scam itself. Voice cloning is one tool a vishing caller can use to sound like someone you trust. Plenty of vishing uses no AI at all.
Yes. A deepfake is any AI-faked likeness of a real person. A cloned voice is the audio version.
Voice-only fakes, because they need less material and work over an ordinary phone call. Convincing live video of several people at once is much harder to pull off.
Less than most people expect. Public talks, earnings calls and social videos are often enough, which is why executives get targeted.
Yes. Verify the request through a channel you choose, such as calling back on a number you already have, before acting. It works no matter how good the fake is.
Reviewed by SEE Team. Last reviewed 24 Oct 2026. How pages are researched and fact-checked. About Social Engineering Examples.
Social Engineering Examples