Digital Defenders

Identity & human attacks · 24

Voice cloning: software, voice changers and PVC pipes

A familiar voice is not an identity check, for people or machines.

AI voice cloningsoftware learns a voicefrom short recordingsVoice changershifts pitch andtimbre in real timeAcoustic tubePVC pipe sized to mimica target's resonanceSounds likethe targetPeoplephone calls, robocalls,"urgent" requestsMachinesvoice biometrics,speaker IDe.g. Biden robocall, 2024e.g. tubes fooled 60% (UW)Defend: never treat a voice as a password · call back · agree a code word
AI voicecloningsoftwareVoicechangerreal timeAcoustictubePVC pipeSounds like the targetPeoplecalls, robocalls(e.g. Biden 2024)Machinesvoice biometrics(tubes fooled 60%)Defendnever treat a voice as a password · call back· agree a code word
Diagram: Voice cloning

AI voice cloning software can learn how someone sounds from recordings and then say anything in that voice. In January 2024, New Hampshire voters got robocalls in which a cloned Joe Biden told them not to vote in the primary. A magician hired by political consultant Steve Kramer said he made the audio with ElevenLabs, which then shut down his account. The FCC fined Kramer $6 million (a New Hampshire jury later acquitted him of separate criminal charges), and earlier that year it ruled that AI-generated voices count as “artificial” under US robocall law.

You don't always need AI. Real-time voice changers shift pitch and timbre during a live call. Researchers at UW–Madison went further with a purely physical trick: speaking through PVC pipes cut to the right length and diameter to mimic a target's vocal resonance. Against automated speaker-identification systems, the tubes fooled the machine for 60% of 91 voices, compared with 6% for unaided human impersonators. Because the change is analog, it slipped past filters designed to catch digital fakes, even though people could still hear it was a different person.

The defence is the same for people and machines: never treat a voice as a password. Hang up and call back on a number you already have, agree a family or team code word for urgent money requests, and prefer passwords plus MFA over voice biometrics for anything important.

Real-world examples

FCC fines consultant $6M over AI Biden robocallsHow the audio was made, the fine, and the FCC fine. A jury acquitted him of the criminal charges in June 2025.engadget.com ↗ UW–Madison: common PVC pipes can defeat voice IDThe tube attack, presented at USENIX Security 2023.news.wisc.edu ↗
Sources

Updated on 12 Nov 2026