The Voice on the Phone Sounds Exactly Like Your Boss

Your accounts officer gets an email from a supplier you've used for years with new bank details, effective immediately. An hour later the phone rings. It's your managing director, sounding rushed, saying the supplier called him and it's fine, pay today. The voice is his. The money goes. Neither the email nor the call came from the people they claimed to be.

Voice cloning tools can copy a voice from a few seconds of recorded speech, and most managers have spoken in a video, a podcast or a voice note somewhere. Attackers combine channels: a fake invoice from a supplier you actually use, followed by a call that "confirms" it. Training staff to listen for a fake voice is a losing game, because the voices keep improving.

The defence that holds is a process where no single message, call or person can send money to a new destination.

• Bank details are locked. Changing a supplier's account needs a request in the system, a callback to a number already on file (never the number in the email) and approval from a second person.
• Two approvals above a limit. Payments over a set amount need two named approvers in the system, whatever anyone says on the phone.
• New beneficiaries wait. A cooling-off period, such as 24 hours, before the first payment to new bank details.
• Every change is logged. Who requested it, who verified it, when and from where.
• Urgency triggers a check. Any payment marked urgent goes to a second approver automatically, because urgency is the attacker's main tool.

Policies get skipped when the boss is shouting. A system that won't release the payment without the second approval doesn't get flustered. I build this as a small internal tool connected to your accounting software, with supplier records whose bank details are locked, approval queues, Telegram alerts to approvers and an audit trail. AI can read invoices on the way in and flag any change in bank details before anyone looks at the amount.

I spent two and a half years full time on the Kite Financial wallet team, where moving money safely was the whole job. I build internal tools with roles, approvals and audit trails, and I run a private Telegram notification service that routes alerts to the right person.

• Internal Tool & Admin Dashboard. Approvals, an audit trail, exports and alerts come with the $1,150 package.
• AI Invoice & Document Extraction from $220. The $560 package adds an approval step and QuickBooks or Xero posting.
• Telegram Alert Bot from $70 to alert approvers instantly.

Book a free call and walk me through how a supplier payment gets approved today. I'll tell you where a cloned voice would get through.