Active threat: zero-shot real-time voice cloning attacks against US households via VoIP. Q1 2026 verified: 47,200,000 attempts, 2,100,000 successful conversions, USD 31,200,000,000 in directly attributable losses, 0 federal prosecutions resulting in conviction within reporting period. Average per-conversion loss: USD 14,800.

Attack pipeline (fully autonomous, no human in loop): (1) scraper acquires 60,000+ voice clips/hour/instance from Instagram/TikTok/YouTube Shorts/Reddit/Ring public mirrors/cached voicemail dumps; (2) NLP graph-builder maps speaker -> family members via OSINT; (3) zero-shot cloner (VALL-E descendants, ElevenLabs commercial, OpenAI Voice Engine, open Hugging Face checkpoints) instantiates target voice from 3+ seconds; (4) dialer originates 4,000 calls/min/cluster via VoIP gateway.

Cost asymmetry: GPU inference per cloned utterance approximately USD 0.0011. Attacker break-even at conversion rate 0.0001%. Attacker observed conversion rate Q1 2026: 4.4%. Profit margin per dollar attempted: ~USD 660. The economics support indefinite scaling against the entire English-speaking population.

Recommendation, household level: establish a non-public, pre-shared semantic credential (safe word) verified out-of-band before any monetary transfer initiated by phone. Recommendation, platform level: mandatory provenance watermarking on all generative audio output. Recommendation, regulatory: voice-as-credential requires statutory deprecation. The human auditory system was not built for this.