logo
'Definitely my son's voice': Manitoba woman targeted by AI phone scam

'Definitely my son's voice': Manitoba woman targeted by AI phone scam

CBC14-05-2025

Social Sharing
A Manitoba woman is speaking up after receiving a phone call she said was an AI scam that used a loved one's voice.
Leann Friesen, a mother of three from the small southern Manitoba community of Miami, got a phone call a couple of weeks ago from a private number. Although the person on the other end of the call sounded like her son, the conversation was odd, she said.
"He said, 'Hi mom,' and I said hi. He said, 'Mom, can I tell you anything?' and I said yes. He said, 'Without judgment?'" said Friesen.
"I'm getting a little bit confused at that point — like, why are you asking me this?"
Friesen said the call was giving her an uneasy feeling, so she told the caller she'd call him back on his cellphone and hung up.
"I immediately called my son, and I woke him out of his sleep, because he works shift work. He said, 'Mom, I didn't call you.' But it was definitely my son's voice that was on the other end of the line."
Using artificial intelligence to scam someone over the phone is a new approach by fraudsters, with criminals using AI software to make themselves sound like their victims' loved ones. The scammers can use short clips of a person's voice found online to re-create a person's voice in a scam call, according to police.
Friesen isn't the only person being targeted. The member of the legislative assembly for Burrows, Diljeet Brar, said his voice was used recently in an attempt to scam one of his constituents.
"[The constituent] said, 'It was your voice.' He has talked to me many times. In the community I meet those seniors often, and he said [it was] the exact same voice."
Brar said the caller asked the constituent for $5,000, but the person targeted caught on before transferring any money.
The MLA said he is speaking up so people are more aware of AI scams.
"I was concerned about the seniors who don't know much about the latest technology. They don't use technology, they don't know how AI works. And I thought about how vulnerable they are," he said.
"It was shocking."
Targeted 'spear phishing': investigator
Keith Elliott is a certified fraud examiner, and the CEO of Reed Research Investigations, a professional investigation firm based in Toronto. He said this type of scam is a spin on a common one known as the "grandparent scam," which typically involves someone calling the victim and posing as a grandchild in legal trouble, saying they need cash in order to be released from police custody.
"The current trend right now is leveraging AI to facilitate different levels of that scam to use voices that are familiar to the parties," said Elliott, describing it as a type of "phishing" scam.
"It's a little more elaborate — it's what we would refer to as 'spear phishing,' because it's very targeted at a specific person."
Elliott said he teaches techniques to verify whether a caller on the phone is who they claim to be.
He suggests calling the person back on a number you trust, or baiting them with false information.
"Say, 'Oh, have you talked to your sister lately?' And the individual will be, like, 'No, I haven't had a chance to talk to her.' I don't even have a sister, so you know it's a fraud," said Elliott.
"That person's going to feed you the answer, so you have to feed them a lie that you know is going to bait them the opposite way."
Elliott also said if something seems off, trust your instincts.
AI fraud attempts and cyber crimes can be reported to the Canadian Anti-Fraud Centre.

Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

Alleged Canadian hacker unmasked after threatening cybersecurity researcher
Alleged Canadian hacker unmasked after threatening cybersecurity researcher

CTV News

time44 minutes ago

  • CTV News

Alleged Canadian hacker unmasked after threatening cybersecurity researcher

When an alleged hacker known as 'Waifu' violently threatened her online, cybersecurity researcher Allison Nixon set out to unmask them. Now Connor Riley Moucka, a 25 year old from Kitchener, Ont., is being held in Canada as he awaits extradition to the U.S. to face multiple criminal charges. U.S. authorities accuse Moucka and his accomplices of hacking into at least 10 organizations and stealing troves of sensitive records like payroll and banking information. By holding stolen data for ransom, they allegedly extorted US$2.5 million in Bitcoin from three of their victims. 'I was not working on him until he started posting threats about me,' Nixon told from New York City. Nixon is the chief research officer and co-owner of Unit 221B, a U.S. cybersecurity firm named after Sherlock Holmes' apartment. Like the fictional detective, Nixon and her colleagues investigate cybercrimes and expose culprits. 'I've seen cybercriminals cause their own downfall,' Nixon, a dual Canadian-U.S. citizen, said. 'But this is probably the most ridiculous instance of it.' 'He couldn't stop threatening people' In 2024, hiding behind pseudonyms like 'Waifu,' Moucka purportedly used Telegram group chats to boast of his alleged crimes and threaten Nixon and her company. Nixon believes Moucka was trying to get her attention to find out what Unit221B knew about him – which she admits wasn't much at the time. Those threats, however, quickly made him a target for Unit221B and would be a crucial misstep in his undoing. 'He was drawing attention to himself and causing more people to work on his case and causing his case to become the higher priority,' Nixon said. 'He couldn't stop threatening people that weren't initially working on his case.' Nixon adds that threatening investigators 'is a really great way to get prioritized.' Working with Unit221B colleagues and partners like Mandiant, a cybersecurity company and subsidiary for Google, it took several months of labour-intensive digital sleuthing to reveal Moucka's identity, which was passed on to law enforcement. Nixon would not disclose exactly how Moucka was identified. 'I know that these threat actors try to learn intel collection methods so that they can try to protect their anonymity, so they can continue doing crimes,' she said. 'So I don't want to publicly discuss the details, because I want to continue using the same techniques again against these guys.' 'One of the biggest cybersecurity breaches' Moucka was arrested at his grandfather's house in Kitchener in October 2024 following a request from U.S. authorities. In March, he agreed to be extradited to the U.S., where he faces 20 federal charges, including several counts of conspiracy, computer fraud, wire fraud, extortion and aggravated identity theft. According to a U.S. indictment, Moucka and accomplices accessed personal records belonging to millions of people, including financial information, passport details and social security numbers. The indictment alleged their goal was 'to enrich themselves by: (a) accessing computers without authorization; (b) stealing sensitive personal identifying, financial, and other valuable information from those computers; (c) threatening to leak the stolen data unless the victims paid ransoms; and (d) offering to sell the stolen data online to other criminals.' While specific companies are not mentioned in court documents, the details largely match the massive 'Snowflake' hack from 2024, which targeted users of a cloud-based storage platform. Companies that used Snowflake and were affected by the breach include AT&T, Live Nation, Ticketmaster, Advance Auto Parts and Pure Storage, many of which had Canadian customers. 'It is certainly one of the biggest cybersecurity breaches that we've had in history,' David Jao, a mathematics professor and member of the University of Waterloo's Cybersecurity and Privacy Institute, told CTV News Kitchener last November. 'The case is not over, there are still other criminals that are out there that have not been caught yet.' Court documents also link Moucka to the case against Cameron John Wagenius, a U.S. Army soldier accused of selling hacked AT&T data, including call records allegedly belonging to Donald Trump and Kamala Harris. Wagenius reportedly plead guilty earlier this year. Nixon says Moucka knew he would eventually be arrested, so he prepared what she refers to as 'insurance policies.' 'He gave packages of money and files to various contacts of his,' she said. 'One of these involved a package of sensitive call details belonging to the former vice-president, Kamala Harris, and the current president, Donald Trump, and multiple members of the Trump family.' 'Money-making schemes and violence' Moucka, Wagenius and other alleged accomplices are reportedly members of 'The Com' hacking community, which is predominantly comprised of young men from English-speaking countries like the U.K., the U.S. and Canada. According to cyberthreat intelligence firm Intel471, individuals and groups within 'The Com' have engaged 'in cybercriminal activities such as subscriber identity module (SIM) swapping, cryptocurrency theft, commissioning real-life violence, swatting and corporate intrusions.' Nixon says 'The Com' shares many traits with 'pre-internet teenage street gangs.' 'Teenagers with nothing better to do, rough home life, they meet each other, they congregate, they form a critical mass and they perpetrate money-making schemes and violence, and they're a negative impact on their local communities, right?' she said. ''The Com' is the same phenomenon, but playing out on the internet.' As he awaits extradition, Moucka was reportedly being held at the Maplehurst Correctional Centre in Milton, Ont. According to Canada's Department of Justice, 'the matter has now proceeded to the Ministerial phase of the process.' The case is expected to be heard at a federal court in Seattle. Moucka's lawyer did not respond to a request for comment. The charges against Moucka have not been proven in court. 'All this terrible stuff that I'm telling you about, I actually really enjoy investigating it,' Nixon said. 'It's like a puzzle every single time – and I love puzzles.' With files from Reuters and CTV News Kitchener's Krista Simpson

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into the world of global news and events? Download our app today from your preferred app store and start exploring.
app-storeplay-store