Tools

Incident checklist

The first hour after a suspected voice fraud, in the order that matters. Work down it. The ordering is the useful part — most of what goes wrong afterwards is caused by doing step four before step one.

Not legal or financial advice, and not an emergency service. Truthring analyses audio files. We do not contact banks, platforms or police on your behalf and we cannot recover money. If anyone is in immediate danger, call your local emergency number now.

0 of 0 Start at the top.

Right now

Stop any payment in progress. Call the bank on the number printed on your card or shown in its official app. Not a number the caller gave you, and not one you found while still on the line.Before anything else on this page Do not call the number back to check. Ringing the caller’s number confirms nothing and can restart the conversation on their terms.Especially if they asked you to Say it out loud to someone in the room. Describing the request to another person breaks the isolation the script depends on and usually settles the question in seconds.

Preserve what you have

Save the original recording untouched. Export the voicemail or voice note exactly as received and keep that copy aside. Work from duplicates. Do not forward it through a messaging app. Chat apps re-encode audio on send, which discards the detail an analysis reads. Move it by cable, cloud drive or email attachment.Why forwarding costs you evidence Do not clean it up or re-record it. No noise reduction, no enhancement, no playing it aloud into another phone. Rough is correct. Screenshot the surrounding messages and call log. Numbers, timestamps, account names. These disappear or scroll away faster than people expect. Write down what happened while it is fresh. Times, what was claimed, the exact wording of the request, what you did, who else was involved, and what made you doubt it.

Within the hour

Report it to the bank properly. Use their term — impersonation fraud or authorised push payment fraud. Ask for a case reference and whether the payment can be recalled. Ask the bank to flag the account. Particularly if the caller obtained any account detail, or if a payee was added or changed. Report it to the national fraud body. Do this even if nothing was lost — attempts are how a live campaign becomes visible.[VERIFY: link national fraud reporting bodies — verify every URL before publishing] Warn the person whose voice was used. Contact them on a channel you know reaches them, not by replying to the message that carried the scam.What they can do next Warn anyone else the same voice could be used against. Family, an assistant, a finance team — whoever could be told to move money on that person’s say-so. At work: escalate internally. Tell whoever owns fraud, security or risk, the same day, even if the attempt failed.Policy template

Afterwards

Submit the recording for analysis. Useful, and not urgent. It can indicate whether the voice was fabricated and sometimes name the generation system.Check a clip Read the result properly. Likely synthetic is the stronger verdict because it needs positive evidence. Likely human is weaker — it can also mean the evidence was destroyed in transit.Reading your result Agree a safe word with the people who could be targeted. In person, never by message, never stored in a phone.Generate one Put the callback rule somewhere it will be seen. By the phone, on the fridge, above the desks where payments are made.Printable card Tell someone else what happened. Embarrassment is the reason these campaigns run for months. A single warning to a group chat or a team meeting does more than any of the technology.

Nothing is saved. There is no storage and no account, and reloading the page clears every tick — so write down anything you need to keep, especially case references.

Why this order

Money first, because recall windows on some payment types are short and close permanently. Evidence second, because the original file degrades the moment anyone helpfully forwards it. Reporting third, because it can be done accurately only once someone has written down what actually happened. Analysis last, because it changes nothing about the first hour and is far more useful once the account of events exists to attach it to.

The most commonly skipped item is the one about telling other people. Voice fraud campaigns work through lists, and the same cloned voice is very often used again within days against someone in the same circle. A warning sent while the account is still fresh is the single highest-value thing on this page.

FAQ

Questions people ask

Nothing was lost. Do I still need to do all this?

Not all of it. Preserve the recording, report the attempt, and warn the people who could be targeted next. The banking steps only apply if money or account details moved.

Do the ticks save if I come back later?

No. This page stores nothing at all, in the browser or anywhere else. That is deliberate, and it means you should note anything important elsewhere.

Can I print this list?

You can print the page from your browser, though for something to keep on a wall the callback card is designed for it.

Check a clip The written version Printable callback card All tools