Family Check-Word Generator (2026) — Protect Against AI Voice Scam Calls

Your generated check-word

Click generate

Generated entirely in your browser — nothing is sent or saved anywhere.

How to actually use this

Generate a phrase above with your family, together, in person or on a call you're certain is genuine.
Agree that if anyone calls claiming to be in an emergency and asking for money or help, they must say the check-word first.
If they can't say it — or hesitate, or try to avoid it — treat the call as a scam and hang up. Call them back directly on their known number to confirm.
Don't post the check-word publicly or write it somewhere a scammer doing research on your family could find it.

Why this actually works against AI voice scams

An AI voice clone can copy how someone sounds, but it can't guess a private phrase your family agreed on ahead of time. This is exactly the kind of low-tech defense that current security researchers recommend against the newest generation of voice-cloning scam calls.

THE ONE RULE THAT MATTERS

A real emergency call from family can wait 30 seconds for you to hang up and call them back directly. If someone is pressuring you not to verify, that pressure is the scam.

Why a Check-Word Works When Questions Fail

Scammers research their targets. They know your children’s names, your street, your dog — all of it from social media. Knowledge-based questions (“what’s your mother’s maiden name?”) are no longer security, because the answers are public. A check-word is different: it is never written down, never posted, and never used anywhere else, so there is nothing for an attacker to find.

Setting It Up Properly

Choose 2–4 random, unrelated words — the generator above does this for you
Tell every family member in person or over a known-good phone call, never by text or email
Agree that any emergency call involving money, codes, or secrecy must include the word
Practise once, calmly, so nobody freezes when it counts

Using It Under Pressure

Real emergencies sound chaotic — that is exactly when scammers strike, because stress shuts down careful thinking. The rule is simple: if a caller can’t give the check-word, hang up and call your family member directly on the number you already have. A genuine emergency survives a two-minute delay. A scam does not.

The simplest protection your family can have

A family check word is a shared secret, agreed in advance, used to verify that an urgent request really came from the person it claims to. It costs nothing, needs no technology, and defeats an entire category of fraud that is otherwise very difficult to defend against.

It matters now because voice cloning has made "it sounded exactly like her" meaningless as evidence. The old assumption — that recognising a voice confirms identity — no longer holds, and nothing has replaced it except deliberate verification.

What it protects against

Family emergency calls. A cloned voice claiming an accident, an arrest, or a lost wallet abroad, needing money immediately.
The hi-mum text. A message from an unknown number claiming to be your child with a broken phone, moving quickly to an urgent payment.
Compromised accounts. A real messaging account taken over, so the request genuinely comes from your relative's profile.
Authority impersonation. Calls claiming a family member is in custody and needs bail or a fine paid now.
Collection scams targeting older relatives. Someone arriving at the door to collect cards or cash "for the bank". A check word that any genuine visitor would know stops this cold.

Choosing a good one

Make it unguessable. Avoid pets, streets, schools, birthplaces, first cars, and anything else that appears on social media or in a security question. Two unrelated words work well: copper lantern, quiet harbour.
Make it memorable under stress. The whole point is that it can be recalled during a frightening phone call. Absurd images stick better than sensible ones.
Keep it short. One or two words. It has to be said naturally in conversation.
Do not write it in a message thread. If a phone or account is compromised, the attacker reads your history. Agree it face to face, or by phone.
Do not use it as a password anywhere. It serves a different purpose and should not appear in any breach list.

How to use it

The rule to agree on is simple: any urgent request for money, card details, or personal information must be confirmed with the check word. If the person cannot produce it, the conversation ends and you call them back on the number you already have.

Ask for it plainly. "What's our word?" Do not offer a hint, do not accept "you know it's me", and do not accept an explanation for why they cannot remember it under stress. A real family member who forgets will happily take a call-back instead.

Agree also that nobody will ever be annoyed at being asked. That agreement is what makes people actually use it, because the usual reason verification fails is social awkwardness rather than ignorance.

Introducing it to older relatives

The approach that works is to frame it as something the family is doing together, not as a warning about their vulnerability. "We've all agreed a word so nobody gets caught out by these fake calls" lands very differently from "you need to be careful". Give a concrete example of the scam so the reason is obvious.

Then practise once. Ring them and ask for the word, so the mechanics are familiar. A step you have rehearsed once is far more likely to be used under pressure than one you only discussed.

When to change it

Change it if it has been spoken where it could be overheard, if it was ever written in a message, if a family device has been compromised, or if somebody outside the group has learned it. Changing it is easy, so do it whenever you are uncertain rather than hoping.

Review it once a year. A quick conversation at a family gathering is enough, and it also brings anyone new into the arrangement.

Frequently asked questions

What makes a good family check word?

Two unrelated, unguessable words that are easy to picture and say. Avoid anything connected to pets, places, dates or schools, since those are discoverable from social media and security questions.

Can we just text it to each other?

Better not to. If any family phone or messaging account is compromised, the attacker reads the history. Agree it in person or on a phone call, and do not store it in writing on a device.

What if someone genuinely forgets it in an emergency?

Then you hang up and call them back on the number already in your phone. That verifies them just as well. The point is to have a step that does not depend on recognising a voice.

Should the word ever be used as a password?

No. Keep it separate. A password can end up in a breach list, and a check word that appears in leaked data is no longer secret.

How do I explain this to elderly parents without worrying them?

Present it as something the whole family is adopting together rather than a caution aimed at them. Give one concrete example of a fake emergency call, then practise it once so the step feels routine.