The FBI has issued a public service announcement warning that cybercriminals are using AI-generated voice deepfakes to impersonate senior U.S. officials in phishing attacks.
Malicious actors have been using advanced synthetic voice technology to create audio messages that sound like real government officials, the law enforcement agency says. These messages are then used in targeted vishing (voice phishing) campaigns designed to gain trust, compromise accounts, and steal sensitive information or money.
“Since April 2025, malicious actors have impersonated senior US officials to target individuals, many of whom are current or former senior US federal or state government officials and their contacts,” the FBI warned.
The FBI says threat actors have been:
Once the attacker gains the victim’s trust, they might:
The FBI emphasized:
“If you receive a message claiming to be from a senior U.S. official, do not assume it is authentic.”
While this campaign initially targets high-ranking individuals, you don’t need to be a government official to be impersonated—or victimized. Voice cloning technology is now accessible to the public. With just a few seconds of audio, scammers can replicate someone’s voice
They are already using audio deepfakes to impersonate CEOs, influencers, and even family members, often targeting average consumers with investment scams or emergency requests
This isn't the first warning. In 2021, the FBI predicted deepfakes would become a key tool in cyber and influence operations.
Read more from Bitdefender:
Whether you're a public official or a private citizen, here’s how to defend yourself:
1. Verify before you trust
If you receive a voice message or call from someone claiming to be an important figure—don’t act on it immediately. Verify their identity using a secondary method, such as an official email or a direct phone call to a known number.
2. Never click on links sent by unknown contacts
If you're asked to "continue the conversation" on another platform, take it as a red flag.
3. Don’t share personal information over the phone
No legitimate official, company, or bank will ask for login credentials, codes, or financial info over a call or text.
4. Use identity protection and scam detection tools
Bitdefender Digital Identity Protection (DIP)
Monitor your personal data online and get alerted if it’s found in leaks or used fraudulently. DIP helps you:
Bitdefender Scamio (Free AI Scam Detector)
Got a strange message, email or phone call? Send it to Scamio or ask for an analysis Scamio helps you detect scam patterns and steers you to safety. It’s free to use, whether in your browser, WhatsApp, Facebook Messenger or Discord.
Before clicking any link, run it through Bitdefender’s free tool to check for hidden dangers like phishing pages or malware.
tags
Alina is a history buff passionate about cybersecurity and anything sci-fi, advocating Bitdefender technologies and solutions. She spends most of her time between her two feline friends and traveling.
View all postsMay 16, 2025
April 03, 2025
March 12, 2025
February 20, 2025