AI Voice Cloning Is Behind a New Law Firm Wire Fraud Scam

How This Law Firm Wire Fraud Scam Works

If someone called your office right now sounding exactly like your managing partner, would your staff question it? A new law firm wire fraud scam is spreading, and it doesn’t rely on a hacked network or a suspicious email — it relies on a voice. Attackers are using AI to clone the voice of an attorney, a client, or a title company representative, then redirect a wire transfer during a real estate closing. For North Shore firms that handle escrow and closing funds, this isn’t hypothetical. The FBI’s Internet Crime Complaint Center logged over 22,000 AI-related fraud complaints in 2025 alone, totaling nearly $893 million in losses — and voice cloning is a fast-growing part of that number. It’s the next evolution of a legal wire fraud scheme firms have been fighting for years, and it’s why the advice we’ve given before deserves a second look now that AI is part of the picture.

If you read our post on Hang Up. Call Back: you already know one of the best defenses against phone-based fraud: never trust the number that calls you; instead, reach out on a line you already know is real. That advice still works. But it assumed you’d at least have a reason to be suspicious of the voice on the other end. This attorney wire fraud scam removes that warning sign entirely, which is exactly why the habit matters more now, not less.

How Attackers Actually Clone a Voice

Most attorneys have already been trained to spot a suspicious email asking them to change wire instructions at the last minute. AI-generated voice scams skip that lesson entirely, and pulling one off doesn’t take a skilled hacker. The process is closer to a recipe than a technical exploit, and it doesn’t require ever having spoken with the person being impersonated:

• Find a recording. Attorneys are unusually easy to find audio of: a firm bio video, a CLE presentation, a webinar, a podcast interview, a court hearing, a LinkedIn video, or even the voicemail greeting on a direct line. Any of these, posted publicly, is fair game, and some tools need as little as 10 seconds of clean audio to work with.
• Upload it to a consumer AI voice tool. The same category of tool marketed for legitimate uses (audiobooks, dubbing, voiceovers) will clone a voice from that recording in a few minutes, for anywhere from free to roughly $5–$11 a month.
• Type out whatever the voice should say. This is the part worth sitting with: the attacker doesn’t need a recording of the real person actually saying anything fraudulent. They type the script, something like “please wire the closing funds to the following account instead,” and the AI speaks it aloud in a voice that sounds exactly right.
• Deploy it. The generated audio gets played live over a phone call, left as a voicemail, or dropped into a video call, timed to a moment when a fast answer feels urgent, like closing day.

That third step is the one that changes the math on this. A cloned voice isn’t limited to repeating things the real person once said. It can be made to say anything, on demand, including brand-new wire instructions that were never spoken by the person being impersonated. None of it requires special access or technical skill, which is exactly why we’ve recommended verifying wire changes by phone for years. The difference now is that the phone call itself can no longer be trusted at face value.

Why Law Firms Are Prime Targets for Wire Fraud Scams

Real estate closings, escrow accounts, and trust accounts mean law firms regularly move large sums of client money on tight deadlines, exactly the conditions that make wire transfer fraud so effective. We’ve written before about email-based Business Email Compromise attacks hitting professional services firms; voice cloning is simply the same underlying scam moving to a new channel. Recent industry reporting shows ransomware and fraud groups have multiplied rapidly, with attackers increasingly shifting away from only pursuing large enterprises and toward mid-sized organizations, the exact profile of a 10–50 person North Shore firm. Professional services firms, including law offices, consistently rank among the most-targeted sectors. The combination of urgency, large dollar amounts, and trust-based communication is precisely what this law office wire transfer fraud is built to exploit.

A Closing Day Scenario

Picture this: it’s closing day, and your paralegal gets a call from a voice she recognizes as the buyer’s attorney. He sounds rushed. There’s been a last-minute change to the wire instructions, and he needs it handled before the closing window passes. The voice, the tone, even the small verbal habits are all exactly right, because they were cloned from a recording of the real attorney. Without a moment to slow down and verify, it’s easy to see how the funds end up somewhere they were never meant to go. This is the scenario that makes wire fraud targeting law firms so dangerous: it doesn’t feel like a scam while it’s happening.

How to Protect Your Firm From AI Voice Cloning Fraud

The good news: you don’t need new advice, just a firmer commitment to what already works, plus a couple of additions built for this specific threat:

• Verify any change to wire instructions using a phone number you already have on file, never a number provided during the call or in the email requesting the change. (This is the same hang-up-and-call-back habit worth reinforcing firm-wide.)
• Require a second person to sign off on any last-minute change to closing or escrow instructions, no exceptions for urgency.
• Train staff specifically on voice cloning and deepfake scams, not just email phishing. The instinct to trust a familiar voice is exactly what attackers count on.
• Confirm wire changes directly with the bank or title company through an established relationship, not through whoever contacted you first.
• Put multi-factor authentication and monitoring in place around financial and case management systems so a cloned voice can’t be paired with compromised account access.
• Voice cloning is only one way AI is quietly reshaping risk at law firms right now. The other is less dramatic but just as real: what happens when your own staff starts pasting client details into tools like ChatGPT. That’s a confidentiality problem, not a fraud one, and it’s worth a look — see Is Your Team Accidentally Handing Client Secrets to ChatGPT?

How Slingshot Helps North Shore Firms Stay Protected

We’ve supported law firms across Salem, Beverly, Danvers, Peabody, Ipswich, Gloucester, and Newburyport since 1997, and we built our services around how firms actually work, not generic IT checklists. That means a 24/7 Security Operations Center watching for the kind of activity that surrounds this deepfake voice scam, an average 15-minute response time when something feels off, and staff training that speaks in plain English instead of technical jargon. You shouldn’t have to become a cybersecurity expert to keep your closings safe.

Technology should support your firm, not put it at risk. Not sure where your firm’s wire transfer protocols and overall security posture actually stand? Our IT Risk Scorecard takes three minutes, asks ten plain-English questions, and gives you an instant read on where the gaps are: no jargon, no sales pitch, just a clear picture of where you stand and what to do next.