PureVPN launches free scan amid voice-cloning scams

PureVPN has launched a free email breach scan and a public awareness campaign focused on AI-driven virtual kidnapping scams. The move comes amid growing concern over the use of cloned voices in family-emergency fraud.

The privacy company warned that criminals are combining voice cloning with personal data exposed in breaches, along with publicly available photos, recordings and family details, to make false ransom demands seem credible. The FBI's 2025 Internet Crime Report recorded more than USD $5 million in reported losses tied to voice-cloning distress scams, a category that includes a range of family-emergency frauds rather than virtual kidnapping alone.

Virtual kidnapping scams rely on fear and urgency. Fraudsters contact relatives claiming that a loved one has been abducted or is in immediate danger, then demand payment before the target can verify the story independently.

Callers may tell victims to stay on the line, avoid contacting anyone else or keep the supposed emergency secret. Those tactics are meant to block the normal checks that might quickly expose the deception.

How scams evolve

The warning reflects a broader shift in impersonation fraud as generative AI tools make it easier to mimic a person's voice from a short recording. PureVPN also pointed to US Federal Trade Commission guidance stating that audio posted online can provide enough material for cloning, while altered photos and videos can be used as false proof that a family member is being held.

That means a scammer does not need extensive background information to make the approach sound believable. A relative's name, a known family relationship, a recent trip, a public photograph or a short voice clip may be enough to support a fabricated story.

The breach scan is designed to show users whether their email addresses are linked to known data breaches. Such exposure can go unnoticed, yet still provide useful material for impersonation attempts.

William Murphy, Retired Deputy Chief, Los Angeles Police Department, said the combination of urgency and real personal information makes this form of fraud harder to spot. "Impersonation and family-emergency scams are more believable when criminals combine urgency with genuine information about the people they impersonate. Consumers should learn both how to recognize suspicious approaches and what personal information about them may already be exposed," Murphy said.

Verification steps

PureVPN urged families to set up simple verification procedures before any suspicious call arrives. Its advice includes contacting the person in question using an existing number rather than one supplied by the caller, and checking with another relative or friend if that person cannot be reached directly.

It also recommended agreeing on a private code word that is not shared publicly online. Such a phrase can offer a quick test when an unexpected call or message demands money or claims an emergency.

Common warning signs include pressure to act immediately, demands for secrecy and requests for payment through cryptocurrency, gift cards or wire transfers. PureVPN also advised people to review what they make visible online, including family links, travel plans, contact details, photos and recordings that could support impersonation.

Evidence should be preserved where possible, including messages, phone numbers, payment instructions and images. In cases of immediate danger, people should contact emergency services. Suspected online extortion attempts can also be reported to the FBI's Internet Crime Complaint Centre, even if no money was sent.

Data exposure

PureVPN linked the scam warning to its wider digital privacy products, which include monitoring newly detected exposures and data-broker removal requests on supported services. The new free scan is positioned as a first step for consumers trying to understand what information may already be circulating beyond their control.

Rohan Ahmed, Business Lead at PureVPN, linked that effort directly to fraud prevention. "Knowing what personal information is already exposed is an important first step toward protecting yourself online. We want to make that awareness easier to access and share. That's why we're offering a free email scan and encouraging people to help their loved ones check, too. Through our Protect Your Circle initiative, everyone who completes a scan can better understand their own exposure. When someone helps two more people complete their scans, seven days of premium Digital Privacy Protection are on us," Ahmed said.

Each person invited through the Protect Your Circle initiative receives an individual breach report tied to their own email address. The aim is to give households a straightforward way to assess exposure before criminals try to turn familiar details into a ransom demand.