Skip to main content
NOPE
Low reported severity Investigation Opened

La Rioja, Spain: Guardia Civil says a parent sent 9,980 euros after a call with an AI clone of their daughter's voice; the money was recovered

The Guardia Civil in La Rioja said on 25 August 2026 that it had solved a 'relative in trouble' fraud in which the criminals used artificial intelligence to clone the voice of the victim's daughter. According to the force's account as reported by the newspaper La Rioja and Radio Arnedo, the victim received WhatsApp messages from an unknown number by someone posing as the daughter and asking for urgent money; when the victim called that number to check, a voice that sounded like the daughter answered, and the victim transferred 9,980.25 euros. Investigators of the Guardia Civil's technology team established that the voice had been generated with AI tools. Urgent coordination with the banks froze the funds in the destination account and the full amount was returned to the victim; Radio Arnedo and ActualidadRiojaBaja report that the presumed perpetrator was identified and investigated.

AI system
Unidentified voice-cloning tool
Occurred
Event date unknown
Reported
25 August 2026
Event location
Spain
What the AI did
Communicated with the person · Depicted or impersonated the person
Reported harm
Financial Loss
Whose AI use
Someone else’s AI use
Setting
Finance · Relationships · Everyday life
Evidence
AI involvement reported · Causal attribution supported · 4 sources, 1 underlying account
4 claims: 4 reported. 4 open questions
People reported harmed
1 person

AI system as recorded: AI voice-cloning tools ('herramientas de IA para suplantar la identidad mediante la clonación de voz'), as established by the Guardia Civil investigation (tool not identified)

What Happened

The fraud. According to the Guardia Civil's account of 25 August 2026, as reported by the newspaper La Rioja the same day and by Radio Arnedo on 26 August, the victim received several WhatsApp messages from an unknown number in which the sender posed as the victim's daughter and asked for urgent financial help. La Rioja reports the pretext as a phone problem that prevented her from accessing her bank account. Because the writing style matched the daughter's, the victim called the number to confirm; the call was answered by a voice that seemed to be the daughter's, which, both outlets report, removed the victim's doubts and led to the transfer of 9,980.25 euros.

The AI finding. Both outlets report that the investigation by the Guardia Civil's Technology Investigation Team (EDITE) and its Equipo@ unit established that the voice used in the call had been generated with artificial-intelligence tools to impersonate the daughter.

Recovery. The force says urgent coordination with the banks involved blocked the transfer at the originating bank and froze the funds in the destination account, and the full amount was returned to the victim before the fraudsters could withdraw it. Radio Arnedo and ActualidadRiojaBaja report that the investigation identified and investigated the presumed perpetrator. The same statement mentions three other recent 'relative in trouble' frauds in Arnedo and Calahorra with losses of 850, 850 and 5,990 euros; neither outlet says AI was used in those cases, and they are not part of this record. In October 2026, La Opinión de Zamora cited the La Rioja case in an article built on advice from the security company ESET.

What is not established. The date of the messages and call, the victim's identity and age, how the fraudsters obtained a sample of the daughter's voice, and which tool was used are not reported.

Reported harm

According to the Guardia Civil as reported by La Rioja and Radio Arnedo, the victim transferred 9,980.25 euros after a call answered by an AI-generated imitation of their daughter's voice; the funds were frozen and the full amount was returned, so the loss was temporary.

Outcome

Resolved

The Guardia Civil's EDITE technology investigation team and its Equipo@ unit investigated the case; according to Radio Arnedo and ActualidadRiojaBaja the presumed perpetrator was identified and investigated, and the 9,980.25 euros were recovered by blocking the transfer at the originating bank and freezing the funds in the destination account. No arrest, charge or court step is reported.

What remains unknown

  • When the messages and call happened (the statement was issued on 25 August 2026)
  • The victim's identity, gender and age
  • How the fraudsters obtained a sample of the daughter's voice and which tool they used
  • Whether the presumed perpetrator has been charged

What the evidence supports

AI involvement: reported. La Rioja and Radio Arnedo report the Guardia Civil's statement that its EDITE investigators established that the voice answering the victim's call had been generated with AI tools ('constató el uso de herramientas de IA para suplantar la identidad mediante la clonación de voz'; 'la voz utilizada durante la llamada había sido generada mediante herramientas de inteligencia artificial'). The AI voice spoke to the victim on the call (communicated_with) and impersonated the daughter toward the victim (depicted_or_impersonated), and both outlets report that hearing it removed the victim's doubts and led to the 9,980.25-euro transfer. The finding is the force's as reported; no technical detail or tool is given.

4 claims: 4 reported. What the statuses mean

Reported According to the Guardia Civil, the victim received WhatsApp messages from someone posing as their daughter asking for urgent money, called the number to check, heard a voice that seemed to be the daughter's, and transferred 9,980.25 euros.

Causal attribution. One origin (the Guardia Civil statement of 25 August 2026) relayed by three outlets.

  • larioja.com(opens in new tab) supports · Spanish
    'Al otro lado de la línea respondió una voz idéntica a la de su hija, lo que disipó cualquier sospecha y le llevó a transferir 9.980,25 euros.'
  • radioarnedo.com(opens in new tab) supports · Spanish
    'En la conversación, el remitente se hizo pasar por su hija y le manifestó que se encontraba en una situación de urgencia, solicitándole ayuda económica.'; 'La llamada fue respondida con una voz que aparentaba ser la de su hija, circunstancia que incrementó la credibilidad del engaño y llevó a la víctima a continuar con la operación solicitada.'
  • laopiniondezamora.es(opens in new tab) supports · Spanish
    'La víctima transfirió 9.980,25 euros'
Reported Guardia Civil investigators established that the voice used in the call had been generated with artificial-intelligence tools to impersonate the daughter.

Causal attribution. The force's own investigative finding as relayed by three outlets; one origin. No technical evidence is published.

  • larioja.com(opens in new tab) supports · Spanish
    'constató el uso de herramientas de IA para suplantar la identidad mediante la clonación de voz'
  • radioarnedo.com(opens in new tab) supports · Spanish
    'Durante el desarrollo de la investigación, los agentes pudieron constatar que la voz utilizada durante la llamada había sido generada mediante herramientas de inteligencia artificial'
  • actualidadriojabaja.com(opens in new tab) supports · Spanish
    'Durante la investigación, los agentes constataron que la voz empleada durante la llamada había sido generada mediante herramientas de inteligencia artificial.'
Reported Urgent coordination with the banks froze the funds in the destination account and the full 9,980.25 euros were returned to the victim.

Causal attribution. The Guardia Civil statement as relayed; one origin.

  • larioja.com(opens in new tab) supports · Spanish
    'la coordinación de urgencia con las entidades financieras permitió inmovilizar los fondos en la cuenta de destino y devolver el dinero a la víctima antes de que los estafadores se hicieran con él'
  • radioarnedo.com(opens in new tab) supports · Spanish
    'permitió recuperar los 9.980,25 euros transferidos'
Reported Radio Arnedo and ActualidadRiojaBaja report that the investigation identified and investigated the presumed perpetrator.

Causal attribution. Two outlets relaying the same Guardia Civil statement (one origin); La Rioja's body does not mention the perpetrator.

Sources

4 sources inspected, from 1 underlying account. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Read in the original Spanish on 2026-10-11 (HTTP 200) by the research agent (an AI); English renderings in this record are the research agent's own translations and no human translator reviewed them. La Rioja newspaper report of 25 August 2026, 11:30, relaying the Guardia Civil statement. Applies to s1.

Read in the original Spanish on 2026-10-11 (HTTP 200) by the research agent (an AI); English renderings in this record are the research agent's own translations and no human translator reviewed them. Radio Arnedo report of 26 August 2026 relaying the same Guardia Civil statement ('Según ha explicado este martes 25 de agosto el Instituto Armad[o]'); same group as s1. Applies to s2.

Read in the original Spanish on 2026-10-11 (HTTP 200) by the research agent (an AI); English renderings in this record are the research agent's own translations and no human translator reviewed them. La Opinión de Zamora article of 10 October 2026 built on ESET advice; its summary of the La Rioja case derives from the same Guardia Civil account, so same group. Applies to s3.

Read in the original Spanish on 2026-10-11 (HTTP 200; body fetched by the nw1 lane of this sweep and re-read by the vc agent) by the research agent (an AI); English renderings in this record are the research agent's own translations and no human translator reviewed them. ActualidadRiojaBaja report dated 25 August 2026 relaying the same Guardia Civil statement; same group as s1-s3. Applies to s4.

Event countries: Spain. Affected-person countries: Spain. Court countries: Unknown.

Event: the Guardia Civil 'ha esclarecido en La Rioja' the case (s1), and its La Rioja investigators handled it (s2). Affected person: the victim's residence is not stated beyond the case being handled in La Rioja, so the affected-person country rests on the event location reported by the force. No court is involved.

Reviewed for publication 2026-10-11: Published as a reported case: the Guardia Civil, as relayed by two La Rioja outlets, describes one victim deceived by a call answered by a voice its investigators established was AI-generated imitation of the victim's daughter, leading to a 9,980.25-euro transfer that banks later froze and returned. All claims rest on the force's statement; the loss was temporary, so severity is low. No identifying details are reported or added.

People described

A parent in La Rioja, Spain, who was deceived by WhatsApp messages and a phone call in an AI-cloned version of their daughter's voice

People reported harmed in this case

1 person

0 AI participants · 1 other person harmed

One person: the victim who made the transfer. The daughter whose voice was imitated is not counted because no harm to her is reported. The three Arnedo and Calahorra victims in the same statement are not counted because no source says AI was used in their cases. The victim did not use the AI.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Tags

#voice-clone#family-impersonation-scam#whatsapp#spain#la-rioja#guardia-civil

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). La Rioja, Spain: Guardia Civil says a parent sent 9,980 euros after a call with an AI clone of their daughter's voice; the money was recovered. AI incidents. https://nope.net/incidents/2026-la-rioja-guardia-civil-ai-cloned-daughter-voice-call-transfer-of-9980-euros-recovered

BibTeX

@misc{2026_la_rioja_guardia_civil_ai_cloned_daughter_voice_call_transfer_of_9980_euros_recovered,
  title = {La Rioja, Spain: Guardia Civil says a parent sent 9,980 euros after a call with an AI clone of their daughter's voice; the money was recovered},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2026-la-rioja-guardia-civil-ai-cloned-daughter-voice-call-transfer-of-9980-euros-recovered}
}

Related cases

Medium Unidentified voice-cloning tool

Washington man reports wiring $13,000 during a 30-hour fake-kidnapping call that used a reported AI copy of the daughter's voice

The Spokesman-Review (8 May 2026) reported that a 75-year-old man in Washington state took a call on Monday 23 March in which a crying voice presented as the man's adult daughter said an accident had happened and asked for help. Male voices then described a collision and said the daughter had been taken hostage. The newspaper states that the daughter's voice on the call was an AI-generated copy and that investigators later surmised the callers used a recording of the daughter's voice with a program that mimicked the speech pattern. Over about 30 hours the callers directed the man to banks and stores in Washington and Idaho, where $13,000 was wired. The man was about to withdraw $17,000 when a bank employee stalled and police were alerted, and police then reached the daughter, who confirmed being at home and safe. The newspaper says none of the wired money had been recovered when the article was published. The man says it took days to start feeling normal again. The report rests on the man's account, a bank employee's account and a police report quoted by the newspaper. The article gives the call date as Monday 23 March without a year. The record uses 2026 because 23 March fell on a Monday only in 2026 among the years 2023 to 2026. The range starts at 2023 because the article says the Federal Trade Commission began warning about AI voice-copy scams as early as 2023, and it ends at 2026 because the article was published on 8 May 2026.

Medium Unidentified voice-cloning tool

Campo Grande, Mato Grosso do Sul: a workshop owner paid about R$28,000 by Pix for a car after messages and voice notes in his brother's AI-cloned voice 'confirmed' the vehicle; a second family avoided the same fraud by checking directly with their daughter

A businessman who owns a workshop in Campo Grande, Mato Grosso do Sul, found a car advertised at a market price by a seller who said he was in Ponta Porã, the businessman's home town; he passed his brother's contact so the brother could inspect the car. The fraudsters then contacted him as if they were his brother, saying he had seen the car, sending a video and confirming everything was in order; believing he was speaking to his brother, he made a Pix transfer of about R$28,000, after which the contact was blocked. He told G1 MS and TV Morena that the criminals used information about his family and a cloned voice. Guided by his wife, he contested the transfer through the Central Bank's special return mechanism and, after nearly three hours, a police report and an in-person registration, recovered about 20 percent. In a second case reported alongside, a medical student's mother in Dourados received messages, a voice note and a video from someone posing as her daughter, in a cloned voice, approving payment for an HB20 she was buying in Campo Grande; the mother checked directly with her daughter and discovered the audio had been AI-generated before any money was sent. A state prosecutor said his unit had not yet catalogued identical voice-cloning cases and urged victims to file police reports; the Civil Police did not respond to G1's questions. The date of the fraud is not reported.

Low Unidentified voice-cloning tool (suspected)

Bhopal: a security guard lost about Rs 35,000 to a caller whose voice sounded like a friend, reported as a suspected AI voice-cloning fraud

Free Press Journal reported on 4 October 2026 that a 50-year-old security guard from the TT Nagar area of Bhopal, Madhya Pradesh, was cheated of nearly Rs 35,000 after a caller impersonated a friend by mimicking the friend's voice. According to the report, the call came on 30 September from an unidentified person who claimed to need money urgently and sent a QR code. The guard made three transfers (Rs 5,000, Rs 10,000 and Rs 20,000), then reached the friend on the friend's own number and learned that the friend had not called. The outlet calls it a suspected case of AI-enabled fraud with a suspected AI-cloned voice. TT Nagar police registered a case and opened an investigation. No source confirms that the voice was AI-generated.

Medium Unidentified voice-cloning tool

Picos, Piauí, Brazil: a digital influencer lost more than R$56,000 when fraudsters sent him audio messages in his uncle's AI-cloned voice 'confirming' a car he was buying in Fortaleza

On Monday 10 August 2026 a digital influencer from Picos, in the centre-south of Piauí, began negotiating a car advertised online for sale in Fortaleza (Ceará), where an uncle of his lives, and asked the sellers to take the car to the uncle so he could inspect it. On Tuesday 11 August a contact using a different number but the uncle's photo sent him audio messages in a voice identical to his uncle's, generated with artificial intelligence, saying the car was in good condition and telling him to make the bank transfer. Believing he was speaking to his uncle, he transferred the money; when he then called the uncle's real number he learned he had been defrauded. The loss exceeded R$56,000, money he says he had saved for years. He registered a police report on 11 August; the Piauí property-crimes unit (Depatri) is investigating and he is seeking a refund from the banks. The account is the victim's own, reported by G1 Piauí on 13 August 2026 from his social-media posts and an interview; the police unit did not respond to G1 before publication.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Back to all incidents