AI can make an urgent call feel real
AI voice cloning and fake video tools make it harder to rely on what a person sounds like or looks like during an urgent call. A scammer may claim to be a child, parent, grandparent, friend, lawyer, police officer, school contact or support worker. They may say there has been an accident, an arrest, a broken phone, a lost wallet, a travel problem or another emergency.
The goal is usually the same: create panic, isolate the person, and push them to send money, share information or act before they verify.
A family safety phrase is one simple way to slow that down.
It is not an account password. It is not something to use with a bank, school, government office or technology provider. It is a private family verification phrase used when someone claims to be a family member, or claims to be acting on behalf of a family member, and asks for urgent help.
Why families should talk about this now
The Canadian Centre for Cyber Security warns that AI can make social engineering more convincing by creating realistic phishing messages and deepfake impersonation of trusted people. Its social engineering guidance says audio or video alone should not be treated as proof of identity for sensitive or unusual requests.
The Cyber Centre’s vishing guidance also notes that threat actors can use AI and short audio samples to simulate a person’s voice. It recommends using verification methods such as safe words, call-back codes or a trusted call-back process before discussing sensitive matters.
This matters for families because emergency scams do not only target seniors. The Canadian Anti-Fraud Centre says these scams can target anyone, and common stories include bail money, car accidents, travel problems, broken-phone messages, requests for gift cards, cash pickup, cryptocurrency or secrecy.
What a family safety phrase is
A family safety phrase is a short private phrase that trusted family members can use to prove that a request is real when the situation is unusual.
It should be:
- easy enough for a child or grandparent to remember;
- unusual enough that it cannot be guessed from public information;
- not based on a pet name, birthday, school, sports team, address or vacation photo;
- not posted online, written in a public place or sent casually in group chats;
- shared only with the people who truly need it; and
- changed if it is accidentally shared or if a family situation changes.
Keep it simple. A phrase can be a few unrelated words or a short sentence tied to a private family memory. The point is not cryptographic perfection. The point is giving people permission to stop, ask, and verify.
When the phrase should be used
Use the safety phrase when a call, text, voicemail, direct message or video call includes an unusual request involving:
- money, e-transfer, gift cards, cryptocurrency, bail, courier pickup or bank details;
- a request to keep the situation secret;
- a claim that a phone is broken and the person has a new number;
- a request for a password, one-time code, recovery code or account access;
- a change in school pickup, child pickup, travel plans or location;
- a claim that police, a lawyer, a doctor or another authority is involved; or
- any message that feels rushed, frightening or out of character.
The phrase should not replace common sense. If the caller knows the phrase but the request still feels wrong, hang up and verify through another trusted route.
A simple script for adults
When a call or message feels urgent, use a short script:
I need to verify this first. What is our family safety phrase?
If they give the right phrase, still slow down before sending money or sharing information. Confirm through a known phone number or another trusted family member if the request involves payment, travel, pickup, passwords or personal information.
If they do not know the phrase, say:
I am going to call you back through the number I already have.
Then end the contact. Do not use the number the caller provides. Do not rely on caller ID. Call the person, their parent, their spouse, another family member or the relevant organization using a number you already know is legitimate.
A simple rule for children
Children should not be expected to investigate a suspicious adult. Give them a rule that is easy to follow.
If someone says:
- Your mom or dad told me to pick you up;
- Your parent is hurt and I need you to come with me;
- Use this new phone number;
- Do not tell anyone;
- Send me a code; or
- Show me where you are;
the child can ask:
What is the family safety phrase?
If the person does not know it, the child should not argue or keep talking. They should go to a trusted adult: a teacher, coach, librarian, neighbour, parent, caregiver or police officer depending on the situation.
For younger children, the rule can be even simpler:
If they do not know the phrase, I do not go. I find a safe adult.
What to tell grandparents and older relatives
Grandparent and emergency scams often rely on fear, embarrassment and secrecy. A caller may pretend to be a grandchild, or may claim to be a lawyer, police officer or court official calling about a loved one.
Agree on a family rule in advance:
- no urgent payment based only on a phone call;
- no cash pickup by courier;
- no gift cards, cryptocurrency or wire transfer for an emergency request;
- no secrecy if someone claims a family member is in trouble; and
- no callback to a number supplied by the caller.
The Canadian Anti-Fraud Centre advises people to hang up and contact the family member directly using a phone number they already have. It also notes that caller ID can be spoofed and that the Canadian criminal justice system does not allow someone to be bailed out of jail with cash or cryptocurrency.
How to set it up in 10 minutes
- Choose the family safety phrase.
- Decide exactly who gets it.
- Explain when it must be used: urgent money, pickup, travel, account access, secrecy or anything that feels wrong.
- Choose two trusted backup contacts who can help verify a situation.
- Write down known phone numbers for those contacts in a safe place.
- Practise the script once with children and older relatives.
- Review it once or twice a year, or after a major family change.
Do not make this dramatic. Treat it like checking smoke alarms or updating emergency contacts. It is a small preparation step that can prevent panic from taking over.
What if there is a real emergency?
A real emergency can still be verified.
If someone is safe enough to call, text or video message, there is usually time for a short verification step. If someone cannot provide the family safety phrase, use another trusted channel. If there is immediate danger, call 911.
If the call claims to involve police, a hospital, a school or another organization, end the call and contact that organization through an official phone number. Do not use a number sent by the caller.
If someone already sent money or shared information
Act quickly.
- Contact the bank, credit card company or payment provider using a known phone number.
- Change passwords for any accounts that may be exposed.
- Turn on or reset multi-factor authentication where possible.
- Contact local police if money was lost or personal information was shared.
- Report the fraud or attempted fraud to the Canadian Anti-Fraud Centre.
- Tell family members so the scammer cannot keep using the same story.
Do not shame the person who responded. These scams are designed to create fear and urgency. A calm family response makes it more likely that people will speak up early next time.
Frequently asked questions
Is a family safety phrase the same as an account password?
No. It should never be used as an account password, banking password, device password or recovery answer. It is only a family verification phrase for unusual or urgent requests.
What if a scammer guesses the phrase?
Treat the phrase as one check, not the only check. If the request involves money, secrecy, a pickup, personal information or account access, verify again through a known phone number or a trusted family contact.
Should children be asked to manage this themselves?
No. The phrase gives children a simple refusal rule. If the person does not know the phrase, the child should go to a trusted adult instead of continuing the conversation.
Should we text the phrase to everyone?
Avoid sending it casually by text or group chat. Share it directly with the people who need it, and change it if it may have been exposed.
What should we do if a caller says there is a gag order or we cannot tell anyone?
Treat secrecy as a red flag. The Canadian Anti-Fraud Centre warns that emergency fraudsters may claim there is a gag order or pressure victims not to speak with others. Hang up and verify through a known family or official contact.
Official sources and reporting links
- Canadian Centre for Cyber Security: Social engineering
- Canadian Centre for Cyber Security: What is voice phishing or vishing?
- Canadian Anti-Fraud Centre: Emergency scams
- Canadian Anti-Fraud Centre: Report fraud and cybercrime
- Competition Bureau Canada: Emergency scams
- Get Cyber Safe: Let good cyber security run in the family
- FTC Consumer Advice: Scammers Use Fake Emergencies To Steal Your Money
This is general community digital-safety information. CyberTECT is not an emergency, legal, policing or investigative service. Call 911 if there is immediate danger.
CyberTECT resources provide general operational guidance. They do not replace advice specific to your legal, regulatory, contractual or technical circumstances.