

Foreign victims of AI voice cloning scams in Turkey may face impersonation, fraudulent transfers, extortion and identity misuse. Learn how to preserve digital evidence, report the crime, trace payments and seek recovery.
Artificial intelligence can now be used to imitate a person’s voice with remarkable realism. Criminals may clone the voice of a family member, company executive, business partner or other trusted person and use the recording during a telephone or internet call to demand an urgent bank transfer, request confidential information or manipulate the victim into taking another financial action. For a foreign national or foreign company dealing with Turkey, an AI voice cloning scam can quickly become a complex criminal case involving digital evidence, bank transfers, telephone records, online accounts and potentially several suspects. The victim should act immediately to preserve evidence, contact the relevant financial institutions and initiate the appropriate criminal process in Turkey.
Voice cloning generally involves using artificial intelligence or similar technology to generate speech that imitates the voice of a real person. Criminal misuse occurs when that imitation is employed as part of fraud, impersonation, extortion, unauthorized access or another unlawful scheme.
The criminal-law assessment depends on what the perpetrators actually did rather than on the mere fact that artificial intelligence was used.
A foreign victim may receive a call apparently coming from a relative saying that they have been arrested and urgently need money. A company’s finance employee may hear what appears to be the CEO ordering an immediate transfer. A foreign investor may receive a cloned voice message from a supposed Turkish business partner requesting payment to a different bank account.
Other schemes can combine cloned voices with fake emails, messaging accounts, manipulated caller identification and fraudulent documents.
The legal characterization depends on the conduct involved. A voice clone used to obtain money can potentially form part of a fraud investigation, while associated conduct may raise additional criminal-law and digital-evidence issues.
The investigation should therefore reconstruct the entire scheme rather than focus only on the AI technology.
Time is especially important where money has already been transferred. Contact the relevant bank or payment provider immediately and explain that the transaction is suspected to result from fraud.
The possibility of preventing onward transfer may diminish rapidly.
Preserve the original audio message or recording where available. Do not repeatedly edit, convert or compress the only available copy.
Keep the original device and file intact whenever possible.
Take screenshots or otherwise preserve the telephone number, date, time and duration of the suspicious call.
If the call appeared to come from a known person’s number, preserve that information as well. Caller identification displayed on a device should not automatically be assumed to establish who actually made the call.
If the cloned voice was delivered through a messaging platform, preserve the complete conversation, profile information, username, telephone number, timestamps and attached files.
A single screenshot may not capture all potentially relevant digital evidence.
Many sophisticated scams use several communication channels. The victim may first receive a fake email and then receive a cloned telephone call designed to confirm the fraudulent payment instructions.
Preserve the original email and associated account information.
Where possible, avoid replacing or resetting the phone or computer containing the evidence until the relevant information has been securely preserved.
Device-level evidence may later become important.
Write down what happened while the events are still fresh.
Record when the first contact occurred, what the caller said, whose voice was impersonated, what payment was requested, which bank account was supplied, when money was transferred and when the fraud was discovered.
Save the IBAN, beneficiary name, bank, payment reference, cryptocurrency wallet or other payment information used by the perpetrators.
These details may provide important investigative leads.
If a Turkish or foreign bank transfer has been made, inform the bank that the payment is disputed as fraudulent and request immediate action under the bank’s applicable procedures.
The victim should obtain written confirmation of the notification where possible.
Foreign victims can report suspected criminal conduct to the competent Turkish authorities. Depending on the circumstances, the matter may be reported to the public prosecutor’s office or law-enforcement authorities.
The complaint should provide a structured chronology and supporting evidence.
A foreign victim’s inability to speak Turkish does not eliminate access to the criminal justice system. Interpretation issues should be addressed so that the victim understands statements and procedural steps.
A victim should not sign a statement that they do not understand.
Depending on the circumstances and appropriate authorization, a lawyer can assist the foreign victim with preparation and pursuit of the criminal complaint and subsequent procedural applications.
This can be particularly useful when the victim resides outside Turkey.
The evidence package may include audio files, telephone records, screenshots, messages, emails, bank-transfer receipts, account details, invoices, fake contracts, cryptocurrency wallet information and correspondence with the person whose voice was cloned.
Organize evidence chronologically.
Digital and forensic examination may become relevant where authenticity is disputed. The technical question should be approached cautiously because determining whether a particular audio file was artificially generated can require specialized analysis.
The case should not depend solely on a consumer AI-detection application.
Original files may contain technical information that is lost when recordings are repeatedly forwarded or converted.
Preserving the original digital file can therefore be more useful than retaining only a screen recording of the audio.
Victims sometimes post recordings online to warn others. Public awareness can be understandable, but modifying or widely redistributing the only original evidence may complicate later examination.
Preserve an untouched copy first.
If the scammer impersonated a family member, director or business partner, obtain confirmation that the person did not make the call or authorize the payment request.
Their actual location and communications at the relevant time may also become important.
Foreign companies operating or investing in Turkey should be particularly alert to executive-impersonation fraud.
A finance employee may receive an apparently authentic call from senior management instructing them to bypass ordinary payment controls because the transaction is “confidential” or “urgent.”
Preserve payment approvals, internal emails, accounting records, banking instructions and employee communications.
These documents can show how the fraud succeeded and who actually authorized the transfer.
An employee deceived by a sophisticated AI impersonation should not automatically be treated as having participated in the scheme.
The company’s internal investigation should distinguish fraud by outsiders from intentional employee involvement or potential internal-control failures.
Fraudulent funds frequently move through accounts belonging to other individuals or companies. Investigators may examine who controlled the receiving account and whether the account holder knowingly participated.
The fact that money entered an account does not by itself resolve the person’s criminal responsibility.
Fraudsters may rapidly transfer funds from the first recipient account to additional bank accounts, electronic-payment systems or cryptocurrency wallets.
This is another reason immediate reporting can be critical.
If stolen money is converted into cryptocurrency, preserve wallet addresses, transaction hashes, exchange information and screenshots.
Blockchain transactions can create a different type of evidentiary trail, although identifying the individuals controlling wallets may require additional investigation.
Depending on the investigation, legal basis and available evidence, protective measures concerning suspected criminal proceeds may become relevant.
The victim should provide accurate account and transaction information as early as possible.
Recovery depends on whether the funds can be located, whether they remain available, the involvement of third parties and the procedural route available in the particular case.
A criminal complaint does not automatically guarantee reimbursement.
Criminal investigation and financial recovery are related but not necessarily identical processes.
Depending on the circumstances, separate civil claims or other recovery measures may need to be evaluated.
The circumstances surrounding authorization, authentication, fraud detection and the payment process should be examined individually.
The fact that the victim technically initiated a payment after hearing a cloned voice can create a different dispute from an entirely unauthorized transaction.
Keep records showing when the fraud was reported, which transactions were identified and what action was requested.
These records may become relevant to later disputes.
The victim may be abroad, the receiving account may be in Turkey, the caller may be located in another country and the technical infrastructure may involve several jurisdictions.
Cross-border evidence and cooperation can therefore become necessary.
Where a cloned voice impersonates an executive, evidence showing the executive’s location at the relevant time may help demonstrate that they could not have made the alleged in-person or location-specific communication.
Some schemes combine voice cloning with manipulated video calls.
Preserve the complete recording where available, not merely a screenshot from the call.
Criminals can potentially obtain voice material from publicly available videos, interviews, presentations or social-media posts.
The victim should identify publicly accessible recordings that may have been used, but should not assume that a particular recording was necessarily the source without evidence.
If the victim disclosed passwords, verification codes or banking information during the scam, affected credentials should be secured promptly.
Relevant institutions should also be notified.
Keep one-time-password messages, login warnings, security emails and device notifications connected with the incident.
These can help reconstruct the attack.
A cloned recording may be used not only to steal money but also to threaten a foreign victim, damage reputation or demand payment.
Preserve every threat and avoid destroying evidence after blocking the perpetrator.
The victim should preserve the threat itself, account information and any sample content supplied by the perpetrators.
The appropriate criminal and protective measures depend on the complete conduct.
Foreign companies trading with Turkey should consider internal procedures requiring secondary verification for unusual payments.
A telephone voice—even one that sounds exactly like a senior executive—should not by itself override established payment controls.
When an urgent payment request arrives, contact the alleged sender through a previously verified telephone number or another independent communication channel.
Do not use contact details supplied in the suspicious message itself.
Requiring two independent approvals can substantially reduce the risk that one employee is manipulated by a cloned voice.
Payment-control policies should expressly cover AI impersonation.
Foreign individuals living in Turkey can also agree on a simple private verification method with close family members for emergency money requests.
The purpose is to create an independent way of confirming identity rather than relying solely on voice recognition.
If the suspected perpetrator realizes that the fraud has been detected, accounts and digital evidence may disappear quickly.
Evidence preservation and formal reporting should generally come before unnecessary confrontation.
A foreign victim of an AI voice cloning scam in Turkey should preserve the original audio and device, save telephone and messaging records, document the payment instructions, contact the bank immediately, secure compromised accounts, create a detailed chronology, preserve information concerning the genuine person who was impersonated, collect all financial evidence and evaluate a criminal complaint and available recovery measures without unnecessary delay.
Potentially, yes. The precise criminal characterization depends on the conduct involved, including how the impersonation was used and how the money or other benefit was obtained.
No. Preserve the original recording and associated digital information.
Yes. Foreign nationality does not prevent a victim from reporting suspected criminal conduct to Turkish authorities.
Interpretation issues should be addressed during criminal proceedings so that the foreign victim can understand relevant statements and procedural actions.
Where money has just been transferred, contacting the bank immediately can be critical. Criminal reporting and financial action can then proceed without unnecessary delay.
Bank and transaction records may become important investigative evidence, subject to the applicable criminal procedure.
Preserve wallet addresses, transaction hashes, exchange records and all available digital evidence. Cryptocurrency can complicate recovery but does not necessarily eliminate investigative possibilities.
Potentially, but recovery depends on whether the funds can be located, frozen or otherwise recovered and on the legal circumstances of the transaction.
Employee responsibility depends on the circumstances. Being deceived by sophisticated impersonation does not automatically establish intentional wrongdoing.
Preserve the digital evidence and act immediately on the financial transaction. In AI-enabled fraud cases, delay can allow money to move through multiple accounts while original electronic evidence becomes harder to obtain.
AI voice cloning cases can involve fraud, identity impersonation, bank transfers, cryptocurrency, digital evidence, account tracing, asset-protection measures and cross-border criminal investigations. Fırat Fesih Kaya Law Office assists foreign individuals, foreign investors and international companies facing AI-enabled fraud and other criminal matters in Turkey. Lawyer Fırat Fesih Kaya provides legal assistance in preparing criminal complaints, preserving and presenting digital evidence, following prosecutor and police investigations, coordinating financial evidence and evaluating available measures for recovery of assets.
Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey