That Call From Your Contractor Might Be a Voice Clone

The call sounds exactly like your contractor

You are three weeks into a roof replacement. The phone rings, caller ID shows your contractor's name, and the voice on the line is his: same accent, same clipped way of saying your street. He says the supplier moved up delivery and he needs the second-draw deposit today, wired to a slightly different account because his bank flagged the old one.

Everything about it feels normal. That is the problem. The pressure, the plausible reason, the familiar voice, and the small account change are not accidents. They are the exact ingredients of a payment-diversion scam, and in 2026 none of them require a skilled human on the other end.

The uncomfortable truth: you cannot out-listen this. The voice can be real audio scraped from a two-minute Instagram reel. Your job is not to detect the fake in the moment. Your job is to refuse to act on any voice or text until the request matches what you already have in writing.

Why detection tools will not save you

Two facts sink the "I'll just tell if it's fake" plan. First, cloning a voice now takes only a few seconds of sample audio, which any contractor with a voicemail greeting, a YouTube testimonial, or a Facebook video has already published. Second, caller ID was never designed to prove identity. Spoofing a name and number is trivial, and only a minority of US calls carry the attestation that says the number is really who it claims to be.

The FBI's Internet Crime Complaint Center reports that business email and payment-diversion fraud drives billions in reported losses every year, with real estate and home-service payments a repeat target. The FBI IC3 has been blunt: the winning defense is out-of-band verification, not gut feeling.

So retire the idea that a scary-good detector app or your own trained ear stands between you and a lost deposit. It does not. What actually protects you is boring: a source of truth you can check the request against.

The principle: match the request against your file

A scam works by asking you to act on new information you have no way to confirm in the moment: a new account number, an unexpected deposit, an urgent change. The defense is to stop treating any single call as the source of truth and start treating your written record as the source of truth.

Source of truth is the set of facts you locked in before any pressure existed: the contractor's real phone number from the signed contract, the agreed payment schedule and amounts, and the account you were told to pay at the start. A request either matches that record or it does not. If it does not match, it stops, no matter how convincing the voice.

This is where an AI home agent earns its keep, and it is worth being precise about what it does and does not do. It does not listen to the call and shout "deepfake." It holds the file. When a request comes in, the useful question is not "does this sound real" but "does this match what we agreed," and a system that already knows your signed scope, schedule, and vendor number can answer that in seconds. In our stack, Vinny is the agent that keeps the contractor and vendor record, so a payment change that contradicts the signed schedule trips a "this does not match your file" flag before you move money.

Verify before you wire: the exact steps

Run this sequence every time a call or text asks for money, a deposit, or a payment change. It takes minutes and it defeats the entire category of impersonation scams, because it never relies on the incoming channel being real.

1. 01

   Do not act on the incoming channel

   Whatever asked for money (the call, the text, the email) is now suspect by default. Do not call the number back that just called you and do not reply to the text thread. Both can be controlled by the scammer. Pause the transaction entirely.

2. 02

   Call the number on your signed contract

   Open the actual signed agreement or your saved vendor record and dial the number written there, not the number on your screen. If the request is real, your contractor confirms it on a line you already trusted. If you reach him and he knows nothing about it, you just caught the scam.

3. 03

   Cross-check the payment schedule

   Compare the amount and timing against the payment schedule you agreed to in writing. A draw that arrives early, an amount that does not match, or a brand-new deposit that was never in the contract is a deviation. Deviations get verified, never paid on trust.

4. 04

   Never accept a new account number by phone or text

   A changed wire or account number is the single most common fraud move. Legitimate account changes are rare, and a real contractor will happily confirm one in person or on a callback to the number on file. Treat any mid-project account change as fraud until proven otherwise.

5. 05

   Confirm out of band and get it in writing

   Use a second, independent channel to confirm: a callback plus a text to the known number, or a quick in-person or video check. Ask the contractor to confirm the amount and account in writing on the trusted channel. Only then do you send, and you send to the account already in your file.

How a home agent flags a deviation before you act

The reason people fall for these calls is not stupidity. It is that the verified facts (the real number, the exact schedule, the account you were told to pay) are scattered across an email thread, a PDF, a text, and your memory, right when you are under pressure. The scam wins in the gap between the request and your ability to check it.

A home agent closes that gap by holding the facts in one place and comparing every request against them automatically. When a contractor sends a payment request, the agent checks it against the signed scope and schedule and answers a single question: does this match. When it does not, you get a flag before you send, not a regret after.

“The mistake people make is expecting AI to spot the fake voice. It usually cannot, and honestly neither can you. What it can do is remember exactly what you agreed to and refuse to let a request slide through that contradicts your own file. The technology holds the ground truth. You keep the final send or do not send call, and that division of labor is the whole point.”

Todd Paton, Partner, One Home Agent

The one rule that never fails

Adjusters, by the way, do not collect deposits. Legitimate contractors do not change bank accounts by surprise text mid-project. And urgency is the tell: the pressure to act now exists precisely because verification would kill the scam. Slowing down is not rude. It is the entire defense.

You do not need to become a fraud analyst. You need one reflex (verify against the file) and, ideally, a system that keeps that file so the check takes seconds instead of a frantic dig through your email. Keep the judgment. Let the file catch the deviation.

Keep the verified file that catches the fake

The scam wins in the gap between a request and your ability to check it. Close the gap. Keep your signed scope, payment schedule, and real vendor numbers in one place so any deviation shows up before you wire, not after.