Key takeaways
- Assume your voice can already be cloned from a short public clip. In May 2025 the FBI's IC3 warned that malicious actors were impersonating senior US officials with text and voice messages, often AI-generated, so the technique clearly works and scales down to any business.
- Set two codewords, one for family and one for your business circle. It's a secret word the real you knows instantly and a voice clone can't guess. The FBI recommends agreeing on a secret word or phrase with your family to verify each other's identities.
- Keep the codeword offline. Say it out loud, never email, text, or store it, and pick something with no public paper trail like an odd two-word pairing. Change it only if it gets typed, overheard, or probed by a fake call.
- Use the callback rule: if a call asks for money or access, hang up and call back on a number you already had, never the number that just called you. Caller ID can be spoofed. For text messages the callback rule is the whole defense, since you can't challenge a text with a spoken word.
- Give your bookkeeper, VA, or assistant a standing instruction to verify with the codeword and a callback before moving money, and promise they'll never be in trouble for slowing down. Fraud runs on urgency.
- If someone fails the word, end the call without explaining, confirm with the real person on your known number, warn everyone who holds that word, pick a new one, and report it at ic3.gov. If money moved, call your bank first.
- Anything based on how a caller sounds or what caller ID shows is beatable. Only a secret you hold or a channel you control actually stops a clone.
- The whole setup is free and takes about ten minutes, and you can have Claude draft the exact family and team messages for you, then run a practice drill so the rule holds under pressure.
Get this skill, and every one I build.
30-day money-back guarantee. Cancel anytime.
Questions people ask
Can someone really clone my voice from a short clip?
What makes a good codeword?
Isn't caller ID or the person's own number enough to trust a call?
What exactly should I tell my bookkeeper or assistant?
What do I do if someone actually fails the codeword?
What are the warning signs of a fake call or message?
Is this legal or compliance advice for my regulated business?

Ronnie spent 18 years building a SaaS with a team of 20 that served over 650,000 customers, generated over $14M in sales, and sent over 550M emails. Now he's solo, solving real business bottlenecks and turning them into working AI skills, workflows, and automations. He teaches all of it, with direct access to him, inside the Solo Creators AI Studio Skool community. See what he's built →
Michael HattawayFounder, Iron Strengthens Iron