Skip to content
FIN-CSIRT
RS
Report an incident

FIN-CSIRT / Practical lesson

When a familiar voice and face are not proof

Recognise an account, audio clip or video used to make a request for money or information feel authentic.

Individuals, employees and social-media administratorsAbout 6 minutes of reading + 3 questions
Start with the example Is someone already impersonating you?

What you will learn

  • Recognise signs of a copied or compromised profile.
  • Verify an urgent request through an independent channel.
  • Reduce information that can support convincing impersonation.

Practice example

A director's voice message requests an urgent payment

Account with a familiar name and photograph

I am in a meeting and cannot talk. Pay the supplier on this new invoice now and do not wait for normal approval.
Fictional situation for practice.
Show the example explanation
Procedure is bypassed
A familiar voice or profile is not a reason to skip payment approval.
New account and secrecy
Verify changed payment details using a previously known contact.
No live conversation
The message blocks verification and keeps the sender in control.

How does convincing impersonation happen?

A scammer can copy photographs and a name into a new profile, compromise the genuine account, or use generated or altered voice, image and video. A deepfake is synthetic or manipulated media that can make it appear that a real person said or did something.

Do not rely on spotting unusual blinking, facial edges or sound artefacts. Such clues are not always present. Check the request, channel and reason you are being asked to act.

Signals in the request itself

  • an unexpected change to payment details;
  • a request to skip normal approval or keep the action secret;
  • urgent demand for money, a document, password or code;
  • a familiar account behaving differently;
  • an attempt to keep all verification in the same chat or call.

Verify through another channel

Contact the person through a number or address you held before the suspicious message. Ask a specific question whose answer is not easy to find in public posts. For business payments, follow the existing dual-approval process and verify supplier account changes.

Limit public visibility of your phone number, email, location, travel plans and job details. This will not prevent every scam, but reduces material for targeted impersonation. Protect social accounts with a unique password and 2FA.

If someone is impersonating you

  1. Preserve the profile address, messages and time.
  2. Report the fake profile to the platform. If your real account was taken over, follow the account recovery guide.
  3. Warn contacts through another channel not to open links, share codes or send money.
  4. If money was sent or banking information exposed, contact the bank immediately. For a work account, include IT, security and finance teams.

Check your knowledge · 3

Your turn to choose the next step.

Choose one answer for each question shown. More complex lessons select three questions from a wider question bank when the lesson loads.

Questions and explanations are also available without JavaScript.

A familiar voice message urgently asks for money. What do you do first?

Why does this matter? A voice can be imitated, a clip edited or the genuine account compromised.

  1. Send money because I recognise the voice.

    Recognising a voice is not enough for a financial decision.

  2. Verify through a previously known contact and ask a specific question.Correct answer

    An independent channel removes the suspicious account from verification.

  3. Ask for another voice message in the same chat.

    Another message does not help if the same account is compromised.

Which signal matters more than small visual flaws in a deepfake?

Why does this matter? Generated media improves, while a risky request and bypassed procedure remain checkable.

  1. The number of views.

    Popularity does not prove authenticity.

  2. The lighting quality.

    Visual artefacts may exist, but their absence is not proof.

  3. A request for a secret, urgent payment or code.Correct answer

    The request determines the risk and need for independent verification.

A friend's account asks for a text-message voting code. What do you do?

Why does this matter? The code may approve a purchase or device link, and the account may be copied or compromised.

  1. Share it because the message is from a friend.

    A familiar account does not prove who is writing.

  2. Verify the friend another way and do not share the code.Correct answer

    Another channel verifies the person while the code remains private.

  3. Share only the last four digits.

    Partial disclosure is unnecessary and may still expose information.

No registration. Your answers are not sent; the result is just for you.

Verify the request, not the recording quality

An agreed internal check and a known second channel are stronger than an impression that a voice or face is real.

Protect business payments

References

Sources and further reading

Account verification and code protection follow Serbian National CERT warnings about social-media competition scams and compromised WhatsApp accounts.

Content last reviewed