Field notes

Blog

Deepfake and voice-fraud intelligence from the people building the detection. Real attacks, new generation models, what defends against them, and where the regulation is heading.

Intelligence3 min read

If the voice sounds right, what happens next?

AI voice cloning makes familiarity a weak control, so regulated firms need evidence that staff can follow independent verification under pressure.

Read the post →
Intelligence3 min read

The Control Test Behind an AI-Deepfake CFO Scam

A convincing face and familiar voice should never be able to bypass callback, approval, separation-of-duties and escalation controls.

Read the post →
Intelligence3 min read

A Familiar Voice Is Not a Payment Control

A reported voice-cloning fraud case is a reminder that resilience depends on workflow design, escalation and evidence, not on asking staff to judge whether a voice sounds genuine.

Read the post →
Research3 min read

We tested voice deepfake detectors the way attackers actually call

Office background noise hid a cloned voice from our own detector. The cause was how detectors average a call, not the model. Here is the test, the fix, and what to check in yours.

Read the post →
Intelligence5 min read

The widening gap between AI voice-fraud losses and the controls firms rely on

The evidence is moving from theoretical threat to board-level risk, but many firms still test training and identity checks rather than the phone workflows attackers are targeting.

Read the post →
Intelligence6 min read

One deepfake got seized. The other took a pension.

Two stories, eleven days apart, that belong together, and the enforcement gap between them.

Read the post →
Intelligence5 min read

Voice cloning just became a desktop app you double-click.

An open-source app clones a voice in 646 languages from three seconds of audio, locally and free. The threat model just changed.

Read the post →