AI Scam Spotter Lab: Cloned Voices and Fake Bots
A relative calls in tears, and it sounds exactly like them. Your manager appears on video with a confidential payment. A trading bot promises it never loses. Meet a week of AI-assisted scams, decide what to do at each turn, and see which choices keep your money safe. Prefer to read first? Start with the guide to spotting AI scams.
You are Sam Okoye. Over one busy week you meet scams that use artificial intelligence to sound and look real: a cloned voice, a deepfake video call, flawless messages and a too-good trading bot. Across 11 decisions you choose what to do. Everything here is fictional: the people, numbers, companies and sites. Each call is scored 0 to 10, with the reason based on advice from the FBI, the US FTC and securities regulators.
This is the guided version: a yellow flash shows where to click and a bar says what to do. Switch to Free play any time.
GuidedPress the highlighted Start button. You can edit the names above first, or keep the samples.
Make it yours
Replace the sample names so the scenario and the debrief you export are about your organisation.
TL;DRWhat this lab is
5 points
- A scenario lab: a fictional person meets a week of AI-assisted scams and you decide what to do at each turn.
- You make 11 scored decisions: a voice-clone emergency call, a family code word, a deepfake video call, flawless AI-written phishing, a romance chat, a fake trading bot, a fake AI app, fake reviews, fake support, a fake officer and what to do after a payment.
- The reasoning follows FBI Internet Crime Complaint Center alerts (December 2024 and May 2025), the US FTC's consumer alert on AI family-emergency scams and its fake-reviews rule, and the SEC, NASAA and FINRA investor alert on AI and investment fraud.
- Free to play. You get a final score and grade, a shareable scorecard and next-step links. A downloadable debrief is available with a paid plan.
- Defensive and educational only. Every person, number, company and site is fictional and no real links appear.
Frequently asked questions
Are these real calls or real people?
No. The people, numbers, companies and sites are fictional and use reserved example names. Nothing connects to any real account, phone or service.
Where does the advice come from?
From the FBI Internet Crime Complaint Center public service announcements of 3 December 2024 and 15 May 2025, the US Federal Trade Commission's consumer alert of 20 March 2023 and its fake-reviews rule announcement of 14 August 2024, and the SEC, NASAA and FINRA investor alert of 25 January 2024. The blog guide links each one.
Can I really not tell a cloned voice or a deepfake by looking and listening?
The FBI lists flaws to look for, such as odd shadows, lag and unnatural movement, and says to listen to tone and word choice. Those clues are unreliable and fading, so the lab teaches checks that do not depend on your eyes and ears: call back on a number you find yourself, use a family code word, and slow down.
Does this lab cover deepfakes at work?
It includes a deepfake video call from a manager. For the workplace side, read our deepfake detection guide and the real-time deepfakes post linked below.
How is it scored?
Each decision scores 0 to 10 and the final score is the share of the maximum. Every answer comes with a short reason, so you learn why a choice helps or hurts.
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.