Reviewed and updated August 2026

Staying safe · 6 minute read

The face on the video call

For most of our lives, seeing someone's face meant it was them. That was never a rule anyone had to be taught — it was simply how the world worked. It has stopped being true, and the habits built on it need replacing.

What changed

A face can now be generated in real time, moving and speaking, convincing enough to survive a video call. It can be a stranger wearing a colleague's face, or a colleague's face saying things they never said. The software to do this is no longer rare, expensive, or difficult.

The most expensive version of this so far has been aimed at businesses rather than families: an employee joins a video call with what appears to be several senior colleagues, all of them generated, and is talked through an urgent transfer that everyone on screen appears to approve. The reason it works isn't that the video is flawless. It's that a room full of familiar faces short-circuits the part of us that asks questions.

The one idea to carry away

A face on a screen is now a claim, not a confirmation — the same category as a name in an email signature. It is worth exactly as much as the channel it arrived through, and no more. That sounds bleak; it isn't. It just means confirmation has to come from somewhere else, and that somewhere else is easy to reach.

The tells, and why not to rely on them

You'll read lists of things to watch for: odd blinking, hair that behaves strangely at the edges, a hand passing in front of the face and briefly tearing the image, lighting on the face that doesn't match the room, lips slightly out of step with the words. All of these are real, and all of them are worth noticing.

But treat them the way you'd treat a squeaky floorboard as a burglar alarm. Useful when it happens. Useless as a system, because it depends on the intruder being clumsy, and this technology gets less clumsy every few months. Every guide written around spotting flaws has a short shelf life. What follows doesn't.

Confirming instead of detecting

  1. Move to a channel they didn't choose. Say you'll call them straight back, hang up, and call the number you already have saved. This is the same move that defuses the cloned-voice call, and it works for the same reason: whoever set up the fake controls the channel it arrived on, and nothing else.
  2. Ask something the real person would know and a researcher wouldn't. Not a birthday or a pet's name — those are findable. Something shared and small: where you ate last time, what you were complaining about on Tuesday, what your daughter decided about the job.
  3. Use the family code word here too. If you set one up after reading about voice cloning, it covers video calls without any modification.
  4. Refuse the urgency. Every version of this depends on a decision being made inside the call. Anything that genuinely matters can survive a fifteen-minute pause while you confirm.

If you handle money for anyone

A church, a club, a small business, an elderly parent's accounts — this is where the largest losses happen. Agree a rule in advance and write it down: no transfer is ever approved on the strength of a call, video or otherwise, without a confirmation on a separate channel first. A rule that exists before the call is the thing that saves you, because it means you don't have to make the decision while someone urgent is looking at you.

The part nobody mentions

Asking a familiar face to prove they're real feels rude, and that feeling does a lot of work for the people running these schemes. It's worth deciding now, calmly, that you're going to be the sort of person who calls back — so that in the moment you aren't weighing embarrassment against caution.

The cost of being wrong is thirty seconds of mild awkwardness with someone who loves you. Anyone real will understand immediately, and quite a few will go set up a code word of their own.