Voice spoofing is the imitation of a person’s speech patterns, tone, accent, or vocal quirks to make a target believe they are hearing the real person. Attackers may use recordings, AI-generated voice synthesis, or trained impersonation to sound convincing enough for a phone call, voice note, or automated verification step.
In cyber security, voice spoofing matters because many workflows still treat a familiar voice as proof of identity. That makes it useful in social engineering, business email compromise follow-ups, help-desk scams, and payment fraud. A spoofed voice can pressure staff into resetting credentials, approving transfers, or revealing sensitive information. Defenders reduce this risk by avoiding voice-only verification, using callback procedures, step-up authentication, challenge questions that are not publicly guessable, and anomaly detection for unusual request patterns. The core lesson is simple: a matching voice does not necessarily mean a matching identity.