Voice-Cloned Supplier Bank Update Scam

How Voice-Cloned Supplier Bank Update Scam Works

Overview: This scam involves fraudsters using AI to clone supplier voices to manipulate company accounts teams into updating vendor payment details. As a result, when the next payment is due, it goes to the scammer’s account. Because the voices are nearly identical and use real invoice references, these scams can go unnoticed until significant money is lost. How It Works: 1. Fraudsters gather audio clips from supplier calls or find samples in public sources. 2. Advanced AI tools are used to replicate the supplier’s accent and style. 3. They call the accounts team, mentioning genuine invoice IDs or past orders, and request an urgent bank account update—citing reasons like "regulatory change," "audit," or "bank merger." 4. The scammers might follow up with a simple email, but the main push is over the phone to avoid email scrutiny. 5. At the next scheduled payment, funds are sent to the fraudulent account. India Angle: This scam is especially seen in Mumbai, Hyderabad, and Bengaluru's industrial and trading circles. It often targets export/import firms and urban SMEs using NEFT, RTGS, or UPI for vendor payments. Hindi, English, and sometimes regional languages are used depending on the victim's location. Real Examples: - A procurement officer in Hyderabad received a convincing call, supposedly from a known supplier, updating him on a new ICICI account number due to a so-called "RBI circular". - An SME in Pune lost Rs 14 lakh after acting on a small test payment, followed by a large invoice settlement to the scammer’s account. Red Flags: 1. Supplier requests for bank changes communicated only through calls. 2. Slight hesitation, robotic tone, or overuse of stock phrases in calls. 3. Supplier references to familiar past orders, but struggles with off-script questions. 4. Email follow-ups from address[ADDRESS_REDACTED]. Protective Measures: - Always confirm bank updates with suppliers on record (official email or by calling original, known numbers). - Check previous correspondences and match account numbers closely. - Use maker-checker workflows for all vendor detail changes. - Insist on supporting documents for all bank account update requests. If Victimised: - Contact your bank immediately to flag the fraud and try to recall payments. - Report the matter via cybercrime.gov.in and inform RBI on helpline 1930. - Notify your supplier for awareness and potential further scams. Related Scams: - Fake bank manager calls - Email phishing with fraudulent payment update links - Supplier impersonation using WhatsApp messages

How This Scam Works — Detailed Explanation

The Voice-Cloned Supplier Bank Update Scam begins with fraudsters meticulously gathering audio samples of a company's genuine suppliers. They might do this via publicly available resources such as social media, webinars, or past recorded calls. The use of platforms like WhatsApp, which is widely used in India for business communications, allows scammers to collect valuable audio data. Once they have sufficient samples, they employ advanced AI tools to replicate the supplier's voice with alarming accuracy, making it seem as though the supplier is making a legitimate call to discuss bank account details.

Once the fraudsters have the cloned voice, they utilize psychological tactics to convince company accounting teams to update payment information. They may call during regular hours and present a convincing narrative, perhaps stating that their bank details have changed due to a merger or banking policy update. This approach exploits the trust developed between businesses and their suppliers over time. Scammers often sprinkle in specific invoice references or past transaction details that only the genuine supplier would know, lending further authenticity to their claim. Their goal is to bypass any email confirmation processes that might usually be in place.

As victims are drawn in, they often unknowingly play out a meticulous scam scenario. In one example, a textile import company in India received a call supposedly from their main fabric supplier, who requested an urgent update to their banking details. Trusting this familiar voice, the company’s accounts team complied, believing they were honouring a legitimate request. Unfortunately, the next payment run, totaling ₹2 crore, was redirected to the scammer’s bank account instead. Such incidents can remain undiscovered for weeks or even months, resulting in significant financial losses for businesses.

The ramifications of the Voice-Cloned Supplier Bank Update Scam in India are severe. According to reports from various cybersecurity agencies, including CERT-In, it's estimated that scams like these cost Indian businesses around ₹1,400 crore in losses every year, highlighting the sheer scale and alarming prevalence of fraud in our digital economy. These scams often go unreported, daunting small to medium enterprises into silence, which only emboldens fraudsters. The Ministry of Home Affairs (MHA) and the Reserve Bank of India (RBI) have urged companies to remain vigilant and report any suspicious transactions immediately.

Recognizing this scam can be tricky, but there are distinct signs that can help differentiate between a legitimate communication and a fraudulent one. If your supplier requests updates to bank details solely through a phone call instead of the usual email correspondence, this is a significant warning sign. Authentic calls may have slight robotic undertones, indicating they may not be from the real supplier. Moreover, be wary if you receive follow-up emails from suspicious or mismatched email addresses. Ensure your business implements verification protocols, such as cross-checking sensitive changes through established channels, especially when changes involve money. Knowing what to look for can greatly reduce the risk of falling victim to these sophisticated scams.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Voice-Cloned Supplier Bank Update Scam Target?

General public across India

Red Flags — How to Identify Voice-Cloned Supplier Bank Update Scam

• Vendor requests bank update via call only
• Voice sounds right but with robotic undertones
• Follow-up email address [ADDRESS_REDACTED]
• Supplier avoids email confirmations for account changes

What To Do If You Encounter Voice-Cloned Supplier Bank Update Scam

1. Report any suspicious communication immediately at the cybercrime helpline 1930 or visit cybercrime.gov.in.
2. Verify all requests for banking or payment updates by calling the supplier’s known contact number directly.
3. Implement a strict policy requiring all banking changes to be confirmed via multiple channels, including email and phone.
4. Consult your bank immediately if funds have been sent to the wrong account to discuss possible recovery options.
5. Educate your team about recognizing voice cloning scams and the importance of secure verification practices.
6. Regularly update your company's cybersecurity measures and ensure software for communication platforms is up to date.

How to Report Voice-Cloned Supplier Bank Update Scam in India

• Call 1930 — National Cyber Crime Helpline (24x7)
• File a complaint at cybercrime.gov.in
• Contact your bank immediately if money was lost
• Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What should I do if I unknowingly updated payment information based on a voice clone?

Immediately contact your bank's fraud department to report the incident. For SBI, call 1800-11-1109, and for HDFC, call 1800-202-6161. Additionally, report the incident to the cybercrime helpline at 1930 or cybercrime.gov.in.

How can I identify if a call is from a genuine supplier or a scammer using cloned voice technology?

Listen for inconsistencies in the voice; it may sound slightly robotic or have unusual tonal differences. Always confirm any banking changes through known contact numbers rather than relying solely on the phone call.

How do I report this type of scam and seek assistance in India?

You can report scams by calling the cybercrime helpline 1930 or visiting cybercrime.gov.in. Ensure to also notify your bank about any unauthorized transactions.

If funds were transferred to a scammer, how can I recover them or secure my account?

Immediately contact your bank to report the fraudulent transaction for possible recovery options. It's crucial to secure your account by changing passwords and enabling two-factor authentication to prevent further unauthorized access.

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.