Learn · 9 short guides
Know what you're up against.
Practical guides to impersonation scams and the checks that help you respond.
Start here
Protect your family
For parents, grandparents, and kids.
How voice scams unfold
Family emergencies and workplace requests reveal recurring pressure tactics.
Protecting parents and grandparents
Plan together, rehearse callbacks and respond to scams without blame.
Helping kids check who is calling
Age-appropriate explanations and practice without fear or blame.
At work
For teams that approve payments or access.
Go deeper
The research and the bigger picture.
A familiar voice or account is not enough.
Safewords add one check. They can be exposed or forgotten, so keep an independent way to verify.
Voice and video deepfakes
A call or video where the voice and face are an exact match — but the person on the line is an AI clone trained on a few seconds of public audio.
Account takeover
Email, Slack, SIM, or social — a hijacked account sends a message from the real address to the right people, with the right history. The channel checks out. The person doesn't.
Pretexting
“This is IT.” “This is your bank.” “This is the CEO.” A confident voice, an urgent ask, the right names. The script is the whole attack.
Vendor and invoice fraud
A real expected invoice arrives at the right time from the real vendor's email — but the wire instructions have been silently switched.
Personal safety check-ins
Agree a check-in plan with a trusted person before a date or trip, including what to do if you cannot verify safety. A phrase alone cannot establish that someone is safe or free to speak.
Source and journalist verification
Agree how to verify unexpected contact and what to do if verification fails. A phrase alone cannot establish that a source is safe or free to speak.
What you probably want to know.
Does Safewords store or see my safewords?
No. The generator runs in your browser, and Safewords.io has no server that processes or logs your words. If you build a plan, your browser may store a local draft on this device so you can continue later.
Who should I share safewords with?
Anyone who might one day receive an urgent, out-of-the-ordinary call from you or about you — immediate family, close friends, and for organizations, anyone with authority to move money or grant access. Many families set up the same safewords for the whole household.
What if someone overhears the safewords?
If the phrase may have been exposed, stop relying on it. Verify independently and agree a replacement privately in person with the people who need it.
Can I use this for my company?
Yes. Many businesses use shared verification phrases alongside other controls to prevent wire fraud, vendor impersonation, and social engineering. The same principles apply: generate, agree on the plan, and drill.
Are safewords really enough?
Safewords provide one layer, not a guarantee. Use an independent callback and your agreed verification plan. Knowing the phrase does not automatically authorize a payment or access.
Is this just for families?
No. Families, friends, teams, communities and other trusted groups can agree a plan. Adapt it to your group's needs; keep existing payment, access and personal-safety procedures.
Is this only about AI voice cloning?
No. Impersonation can involve a stolen account, a cloned voice or a misleading message. A private phrase can add a check, but it does not replace independent verification.
Ready to do something about it?
Review 14 core checks for your accounts, devices, and recovery.