Call your bank and you might never be asked for your mother’s maiden name again. A few seconds of talking is enough for the system to know it’s you.
That’s voice biometrics in banking. Millions of customers already use it and many love how fast it is. But the same years that made it popular also brought cheap AI tools that can copy a voice.
So is your voice a smart password or a weak spot? This guide explains how it works and what it does well. It also lays out where the risks are so you can decide how comfortable you are.
What is voice biometrics?
Voice biometrics identifies you by the way you sound. It cares less about what you say than about how you say it.
Your voice is shaped by your throat, mouth and nasal passages, plus habits like pace and accent. When you sign up the bank turns those features into a mathematical model called a voiceprint. On later calls the system compares your voice with that model and produces a match score.
It’s one of several types of biometrics that banks use. Unlike a fingerprint or face scan it works over an ordinary phone line.
Two ways a bank can check your voice
| Method | How it works | What you notice |
|---|---|---|
| Active (text dependent) | You repeat a set phrase such as “My voice is my password” | A short spoken step at the start of the call |
| Passive (text independent) | The system listens to normal conversation with an agent or menu | Nothing. It checks you quietly in the background |
Many banks combine voice with other signals such as the phone number and the device. The diagram shows how those pieces fit together.
Where banks use voice biometrics today
Voice ID lives mostly in phone banking and call centers. That’s where banks have always struggled to prove who’s on the line.
- HSBC UK said in 2021 that more than 2.8 million customers were using its Voice ID. About 14,000 more were signing up each week.
- Charles Schwab offers Voice ID on its phone lines. Schwab says the system checks hundreds of voice traits and works alongside other security layers that include deepfake detection.
- Lloyds Bank in the UK uses voice ID on its phone banking line too. It made headlines for the wrong reason in 2023, as you’ll see below.
In the US the practice is widespread enough to draw political attention. In May 2023 the chair of the Senate Banking Committee wrote to six big firms about their voice authentication services. The list included JPMorgan Chase, Bank of America, Wells Fargo, Morgan Stanley, Charles Schwab and TD Bank.
The case for voice biometrics: benefits banks point to
Supporters have real results to show. Here are the benefits of voice biometrics that banks and customers mention most.
It cut phone fraud for at least one big bank
HSBC UK reported that Voice ID stopped almost £249 million of attempted fraud in one year. The bank also said attempted telephone banking fraud fell by 50% year on year. Those 2021 figures predate cheap voice cloning but show what the system achieved against the fraud of its time.
No more forgotten PINs or awkward questions
Security questions are weak in their own way. Answers like your birthday or first school often leak online or show up on social media.
Your voice can’t be forgotten or written on a sticky note. Schwab says its system removes the need to remember PINs or answer personal questions.
It’s fast and often invisible
Passive systems check you while you explain why you’re calling. For many customers that’s the whole appeal. There are no codes to type and no quiz before help arrives.
It works without a smartphone
Not everyone banks through an app. Voice ID works on any phone line, which matters for older customers and people with poor eyesight or limited hand movement.
The case against: can AI clone its way in?
Critics point to one big change. Generative AI can now copy a human voice quickly and cheaply.
A journalist got into his own account
In February 2023 Vice reporter Joseph Cox used a free AI voice tool to clone his own voice. He recorded about five minutes of speech and fed it to the software. The fake voice then passed the voice check on his Lloyds Bank phone line.
Researchers beat the safeguards too
Computer scientists at the University of Waterloo tested deepfake voices against voice authentication systems. They reported up to a 99% success rate within six attempts. Their trick was to strip out the tiny clues that usually give synthetic audio away.
Detection is improving but not solved
The security community runs a regular contest called ASVspoof to test fake speech detectors. In the latest round the best systems still had error rates of about 2.6% to 8.6% depending on the rules. Basic reference detectors did far worse at around 29% to 36%.
So detectors keep getting better. But the report notes that real phone calls add compression and noise that make the job harder.
Warnings from the top
The concern has reached regulators and AI leaders themselves.
- In 2023 US Senator Sherrod Brown told banks that cloned voices had already fooled some systems.
- In November 2024 the US Treasury’s FinCEN warned financial institutions about rising deepfake fraud. It reported more suspicious activity reports mentioning deepfakes since 2023.
- In July 2025 OpenAI’s Sam Altman spoke at a Federal Reserve conference. He called it crazy for banks to still accept a voiceprint as authentication.
“AI has fully defeated that.”
Sam Altman, OpenAI, on voiceprint checks
Scammers target customers as well as systems
Cloned voices also trick people into sending money to a fake relative. A Starling Bank survey of 3,010 UK adults found that 28% said they had been targeted by an AI voice cloning scam in the past year. Starling warned that three seconds of audio can be enough to clone a voice.
Voice biometrics in banking: both sides at a glance
| Question | The case for | The case against |
|---|---|---|
| Fraud | HSBC UK reported a 50% fall in attempted phone fraud | AI clones have passed real bank voice checks |
| Convenience | No PINs or security questions to remember | Extra checks get added when trust drops |
| Detection | Banks layer in deepfake detection | Top detectors still miss some fakes in tests |
| Privacy | The voiceprint is stored as a math model, not a recording | A voiceprint can’t be changed like a password if leaked |
| Access | Works on any phone with no app needed | Loud background noise can block a match |
Compliance: why voice data is sensitive
A voiceprint is biometric data and many privacy laws treat it as extra sensitive. In the European Union the GDPR lists biometric data used to identify people as a special category with tighter rules. In the US states such as Illinois require consent before companies collect biometric identifiers.
That’s why voice security in banking is as much a compliance job as a tech one. Banks have to explain how they store voiceprints and how customers can delete them. They also need a plan for when a voiceprint check fails.
What about voice biometrics for small banks?
Smaller banks and credit unions rarely build these tools themselves. They often buy them from specialist vendors as a cloud service. That lowers the cost but makes the vendor’s security a big part of the bank’s own.
FinCEN’s advice applies to banks of any size. It urges multifactor checks that include phishing resistant methods rather than trusting one signal alone.
How to decide what’s right for you
There’s no single right answer. A few steps help whatever you choose.
- Ask your bank whether it uses voice ID on your account and how to switch it off. Schwab for example lets customers unenroll by calling its main line.
- Keep a backup check. A verbal password or app approval adds a second layer if a voice match isn’t enough.
- Prefer app based approvals for big transfers. Many banks let you confirm payments in their app instead of by phone.
- Agree a family safe phrase. It helps you spot a cloned voice pretending to be a relative in trouble.
- Pause on urgent calls. Hang up and call back on the number printed on your card.
Voice is only one tool among many. Our guide to biometric authentication methods compares it with fingerprints and faces.
Voice ID at your bank: quick answers
What is voice biometrics in banking?
It’s a way for a bank to confirm who you are by the sound of your voice. It’s mostly used on phone banking lines and in call centers.
Is voice authentication in banking safe?
It depends on how it’s used. On its own it has been fooled by good AI clones in tests. Combined with device signals and app approvals it’s one useful layer among several.
What are the benefits of voice biometrics?
Speed and convenience top the list. There are no PINs or security questions to remember and it works on any phone. HSBC UK also reported a big fall in phone fraud after rolling it out.
Can I opt out of voice ID?
Often yes, and Schwab for example lets customers unenroll by phone. Ask your bank how to remove your voiceprint and what backup check replaces it.
Does voice biometrics replace other bank security?
No. Banks still rely on cards, PINs and app checks. Cash machines use other methods too, as our look at biometric ATMs shows.
So, how comfortable are you?
Voice biometrics in banking sits at an awkward crossroads. It made phone banking faster and helped at least one major bank cut fraud. Meanwhile AI voice cloning has turned a once clever idea into a target.
So think about your own situation. Would you rather skip the security questions or keep your voice out of the bank’s system altogether? And if your bank uses voice ID, do you know what backup check sits behind it?
There’s no wrong answer, only an informed one. Our guide to the advantages and disadvantages of biometrics can help you weigh the wider trade offs.
Sources
- HSBC UK (May 2021): HSBC UK’s Voice ID prevents £249 million of attempted fraud
- Charles Schwab: Voice ID Service
- US Senate Banking Committee (May 2023): Brown Presses Banks on Voice Authentication Services
- Biometric Update, reporting Vice (Feb 2023): Journalist uses AI voice to break into own bank account
- University of Waterloo (June 2023): Waterloo researchers uncover flaw in voice authentication
- Wang et al., ASVspoof consortium (2024): ASVspoof 5: Crowdsourced Speech Data, Deepfakes, and Adversarial Attacks at Scale
- FinCEN, US Treasury (Nov 2024): Alert on fraud schemes involving deepfake media
- Associated Press via WSLS (July 2025): OpenAI’s Sam Altman warns of AI voice fraud crisis in banking
- Starling Bank (Sept 2024): Starling Bank launches Safe Phrases campaign
- American Banker (July 2025): Banks tighten ID checks as AI deepfakes get better
- GDPR: Article 9, Processing of special categories of personal data
