← Vercon Research

5 min read

Voice Security·

Synthetic Voices Make Old IVRs Look Too Trusting

ML
Marcus Lattimore
Director, Threat Analysis & Mitigation, Vercon
analyst reviewing cybersecurity data on a laptop

Voice security is no longer a narrow telecom concern. It is part identity control, part fraud operations, and part customer-experience design.

A useful public reference point is Federal Communications Commission's "FCC Makes AI-Generated Voices in Robocalls Illegal" (2024-02-08), which shows why voice, identity, and approval controls now belong in the same operating conversation.

The strongest control is usually a simple one: slow down high-risk requests. Payment changes, password resets, number routing changes, urgent executive instructions, and customer data requests should not be approved because a caller sounds familiar.

Vercon's operating recommendation is to score the call, route uncertain cases to a human breakpoint, and preserve enough evidence to review the decision later.

The point is not to make every call suspicious. The point is to stop treating the telephone as a low-risk side channel. In an AI-assisted fraud environment, the voice channel deserves the same management discipline as login, payments, email, and customer data access.

Referenced reporting

Links are provided for reference and are not legal advice or a guarantee of verification.

#IVR security#voice spoofing#authentication

Find out where your communications channels are exposed.

A Vercon Communications Security Assessment gives you an executive-readable risk report and a prioritized remediation roadmap, usually inside of four weeks.