Deepfake Voice Scam Impersonating AT&T Customer Support
Criminals use AI voice synthesis to impersonate AT&T customer service agents, calling subscribers with fabricated account alerts and persuading them to surrender login credentials or authorise SIM changes.
Part of: Deepfake Voice Scams
Last reviewed: 8 June 2026
AT&T customers receive legitimate calls from AT&T about billing queries, promotions, and technical issues, which means an inbound call from an apparent AT&T agent does not immediately trigger suspicion. AI voice synthesis now allows criminals to generate these calls at scale, using a voice that sounds calm, professional, and consistent with a customer service centre — without employing a single human agent.
The deepfake voice attack on AT&T customers serves as either a standalone credential-theft operation or as an escalation step following a phishing email. In the escalation pattern, the victim receives an email about a supposed security issue, then gets a call from an AI voice agent referencing the same issue, creating a convincing multi-channel validation that the threat is real.
AT&T account credentials are particularly valuable because they protect not just the AT&T subscription but the phone number itself — and SIM-swap attackers need AT&T account access to carry out a number port.
How this scam works on the AT&T brand
The AI voice call opens with a scripted alert: the caller explains that unusual activity has been detected on the victim's AT&T account and that a brief verification is needed to prevent suspension. The voice sounds natural — no scripted pauses, appropriate sympathy — and correctly addresses the victim by name, which it may have obtained from a data-broker record.
The caller asks the victim to verify their identity by confirming their account PIN or the last four digits of their Social Security Number. It may then tell the victim that a verification code has been sent to their phone and ask them to read it back — the real code for a legitimate AT&T account change initiated by the attacker in the background.
If the victim reads the code, the attacker uses it to authorise an online SIM swap, email address change, or PIN reset, completing the account takeover. The entire process can take under five minutes.
Common red flags
- An inbound call from an apparent AT&T number claims your account has suspicious activity and requests a PIN or verification code
- The caller asks you to read aloud a code that was just sent to your phone — AT&T genuine agents do not need you to read verification codes aloud
- The voice sounds unusually even and professional, with perfect diction and limited natural hesitation
- Asking the caller an unexpected off-topic question results in a generic or delayed response inconsistent with a real agent
- The caller urgently asks you to act within minutes to prevent account suspension
- You did not expect any contact from AT&T and received no prior communication about the issue described
How to protect yourself
- Hang up on any unsolicited call claiming to be AT&T and call AT&T back on 611 from your AT&T phone or 1-800-288-2020 from another line
- Never read a verification code aloud to an inbound caller — codes sent to your device are for your eyes only
- Enable AT&T account PIN protection and SIM lock to make account changes harder even if some details are obtained
- Enable two-factor authentication on your myAT&T account using an authenticator app rather than SMS
- Treat any call that combines your name, account details, and a code request as a likely AI voice scam
- Report suspicious calls using AT&T's Call Protect app to help block similar numbers
How to report it
- Report the scam call to AT&T by calling 877-844-5584 or via att.com/reportfraud
- File a complaint with the FCC at consumercomplaints.fcc.gov about the spoofed caller ID
- Report to the FTC at reportfraud.ftc.gov
- If account details were compromised, contact AT&T immediately to lock your account and check for recent SIM changes
Frequently asked questions
Does AT&T ever call customers to verify their account PIN?
AT&T may call customers for legitimate reasons, but genuine agents do not ask for your full account PIN, Social Security Number, or verification codes over an inbound unsolicited call. Hang up and call back through the official number.
How do I identify an AI-synthesised voice on a phone call?
AI voices are often perfectly cadenced with limited natural filler. Ask an unexpected personal question or request the agent repeat something in a different way — AI systems may respond with generic non-answers or brief pauses while generating a response.
What if I already read a code to the caller?
Assume your AT&T account is being actively changed. Call AT&T immediately at 611 or 1-800-288-2020 to lock the account, check for SIM changes, and revert any account modifications. Also change your AT&T account PIN.