Detecting Deepfake Audio in Vishing Attacks

When to Use

• A suspected vishing call used an AI-cloned executive voice to authorize a wire transfer
• Security operations received a voicemail that sounds like the CEO but the tone seems off
• Incident response needs to determine whether a recorded phone call contains synthetic speech
• Fraud investigation requires forensic proof that audio was AI-generated
• Red team exercises use voice cloning and blue team needs detection capability

Do not use for text-based phishing (email/SMS); use email header analysis or URL detonation tools instead.

Prerequisites

• Python 3.9+ with librosa, numpy, scikit-learn, and scipy installed
• Audio samples in WAV, MP3, or FLAC format (mono or stereo, any sample rate)
• Reference corpus of known genuine voice samples for the targeted individual (optional but improves accuracy)
• FFmpeg installed for audio format conversion (librosa dependency)
• Minimum 3 seconds of audio for reliable feature extraction