Mike got a LinkedIn message from someone claiming to write for a trade publication. He wanted his thoughts on a draft article and quoted him by name. Flattering. Normal enough. He sent a link to “review the file.”

He clicked it. A real Google sign-in page popped up. His actual login page, his actual account. He typed his password like He’d done a thousand times before.

Then came a second window. An app wanted permission to read his email and files. He tapped “Allow” without really reading it. Who has time to read a permissions pop-up?

Three weeks later, invoices were going out from his email that He never wrote.

The call came in at 2:47 PM on a Tuesday. The voice on the other end was her son’s — same tone, same cadence. It wasn’t him. AI voice cloning scams are hitting parents harder than ever, and the 2025 FBI IC3 Report logged over 1 million complaints and $20.9 billion in losses to prove it. Here’s what scammers are doing, why busy parents are the primary target, and the two-minute defense that stops most of it cold.

Sarah stared at her phone screen, heart pounding. The text looked real: “USPS: Package delivery failed. Confirm address: [link].” Her sister had mentioned sending a birthday present last week, so the message made sense. She tapped the link. The page loaded instantly, with an official USPS logo in blue and red, and a professional layout.