Hi Mum Scam & AI Voice Cloning

How scammers clone family voices from three seconds of audio — the verbal-challenge defence that defeats them, and what to do if you've been targeted.

Last reviewed: 9 May 2026 · ScamSupport research

The Hi Mum Scam — What It Is and Why It Works

The "Hi Mum" scam (also "Hi Dad", "Hi son", or simply "Hi, it's me") is the highest-volume family-impersonation fraud in the UK. The pattern is consistent: a WhatsApp or SMS message arrives from an unknown number claiming to be from a family member who has lost their phone, broken it, or got a new number, and now urgently needs help — usually money for an emergency payment. UK Finance reports that "Hi Mum" losses run into millions per year, with most victims being parents in the 50-70 age bracket whose adult children live independently.

The classic Hi Mum script

Message 1 (unknown number): "Hi Mum, I've lost my phone and this is my new number. Please save it and message me back when you get this. xx"

Message 2 (after Mum replies): "Thank goodness! Mum, I'm in a real bind. I need to pay an urgent invoice today and my online banking is locked while I get the new phone. Can you transfer £1,800 for me and I'll repay you tomorrow? I'll send you the bank details now."

Message 3: account details for an account in someone else's name. The "child" pressures Mum to send urgently, often via Faster Payments. After the transfer, the scammer disappears and the real child knows nothing about it.

The 2026 AI Voice-Cloning Variant

The newer and more dangerous variant uses AI voice cloning. McAfee research has shown that three seconds of audio is enough for an 85% voice match; voice cloning has crossed what Fortune calls the "indistinguishable threshold". Scammers harvest the voice from a public TikTok, Instagram reel, YouTube clip, or even a brief LinkedIn intro video, then use the clone in a panicked phone call:

"Mum, it's me — I've been in a car accident. The police are here. I need you to send £5,000 to the solicitor's account or they'll arrest me. Please don't hang up — I don't have much time."

The voice is exact. The emotional pressure is overwhelming. The classic verification techniques (just call your child back) are defeated because the call is in progress and the "child" is begging Mum not to hang up. Documented losses in the UK and US in 2025-2026 include single cases above £100,000.

The Verbal Challenge — The Single Defence That Works

The defence is to agree a family password or verbal challenge in advance. It must be something a scammer cannot guess from social-media research:

Agree the challenge with the family members most likely to be impersonated — parents, partners, adult children. Practice it once. Then any "emergency" call where the caller can't produce the challenge is, by definition, fake. Hang up and call the real number.

What to Do if You Receive a Hi Mum Message

  1. Don't respond and don't send money. Don't even acknowledge that you might be the right "Mum".
  2. Call your real child on their known number — not the new number in the message. If they don't answer, try a sibling or another family member to verify. Most "lost-phone" claims fall apart immediately when checked.
  3. If it's a voice call, hang up and call back on the known number. AI voice cloning can't intercept your outbound call to the real number.
  4. Forward the SMS to 7726 (free) and report the WhatsApp contact via profile → three-dot menu → Report.
  5. Block the contact across whatever channel they used.
  6. Tell other family members — if scammers have your number they may have other family numbers too.

If You Have Already Sent Money

  1. Call your bank's fraud line immediately using the number on the back of your card. The phrase to use: "This was an authorised push payment scam. Please log it under the PSR reimbursement scheme."
  2. The UK's mandatory APP-scam reimbursement scheme covers Hi Mum scams up to £85,000 per claim where the customer was deceived. The bank has up to five business days to make a reimbursement decision in straightforward cases.
  3. File a Report Fraud complaint at reportfraud.police.uk. Save the case number; share it with your bank.
  4. If your bank refuses or delays, escalate to the Financial Ombudsman Service — free, independent, often results in reimbursement where the case warrants it.
  5. For Canadian victims: call CAFC at 1-888-495-8501 within 24 hours; the helpline coordinates with banks for fund-freeze attempts.
  6. Read our full UK Recovery Guide for the complete first-60-minutes playbook: /scamsupport/blog/uk-recovery-guide-2026.

Additional Resources

Protect Your Data with VPN

Use NordVPN to encrypt your connection when accessing sensitive accounts online, protecting your data from interception.

Affiliate disclosure: as a NordVPN partner, ScamSupport may earn a commission if you sign up via this link — this doesn't change our recommendation or the price you pay. Full affiliate policy →

Get NordVPN Protection

Related scam guides

Use the Scam Message Scanner →