That "Urgent" Call From Your Boss? The Voice Is Fake — And It Cost $1.33 to Make

A convincing fake of your boss's voice — the exact tone, the exact urgency — now costs about a dollar and thirty-three cents to make. Not thousands. Not a Hollywood studio. Roughly the price of a candy bar. That number, according to an I.B.M. report on deepfake-driven cybercrime, is the whole reason this problem is exploding.

If you've ever gotten a call that made your stomach

If you've ever gotten a call that made your stomach drop — your manager needs a wire transfer, right now, no time to explain — this is your episode. Because the scary part isn't that the voice sounds real. It's that it's cheap enough to try on everyone. A lot of us think we'd catch a fake by staring hard at the face or listening for glitches. Today I want to show you why that instinct is exactly the wrong one — and what actually protects you. So how do these attacks really work?

Let's start with the money, because it changes everything. At a dollar thirty-three per attempt, the math tips hard toward the attacker. One successful wire fraud can pay back thousands of failed tries. Scale is the game-changer. This stopped being a rare, sophisticated hit — it's now a numbers game aimed at anyone with a job and a bank account.

And this isn't theoretical. A March 03/01/2026 analysis from C.S.I.S. documents North Korean state operatives using A.I. personas and deepfake video to pass remote job interviews at U.S. tech companies. They faked faces and voices on live video calls to get hired — and then get inside. For a company, that's an intruder with a badge. For the rest of us, it means a face on a screen is no longer proof of anything.

The misconception — the one that trips up smart people

Now the misconception — the one that trips up smart people. We've all seen those "spot the fake" articles online, so we assume the danger lives in the pixels. Study the eyes, check the lip-sync, catch the flaw. But that's not where these attacks win. The urgency isn't an accident — it's the design. Security researchers describe it plainly: a request arrives with the right voice, the right face, and the right level of pressure, so it feels believable before you can slow down. The trap isn't spotting a glitch. It's noticing you're being rushed.

These attacks lean on something called authority bias — our built-in habit of doing what a senior person tells us, even when it breaks the rules. That's not stupidity. That's how workplaces are supposed to function. The attacker just borrows the boss's face to switch it on.

So what stops it? A second channel. A perfect fake I.D. at the airport still fails when a trained officer checks your boarding pass a different way. Deepfakes collapse that by making voice and face both look real on one call. So the defense isn't to squint harder — it's to refuse to act on that one channel. Hang up. Verify through the approved route. A pre-agreed challenge question breaks the whole chain.