This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A journalist successfully bypassed Lloyds Bank's 'Voice ID' biometric authentication system using a synthetic voice clone created with ElevenLabs. The experiment highlighted vulnerabilities in voice-based security across multiple financial institutions, demonstrating that AI-generated audio can be used to gain unauthorized access to account information. While the bank maintains that its security measures are robust, the report underscores the growing risk of AI-powered voice cloning in financial fraud.
A UK journalist was able to successfully bypass Lloyds Bank's "Voice ID" program to access his bank account using an AI-generated audio of his own voice.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The report notes that ElevenLabs' technology was also abused by trolls to generate transphobic and racist content.
The bank's biometric Voice ID system possessed a critical security vulnerability that allowed synthetic voice clones to bypass authentication.
The incident demonstrates how AI voice cloning can be used to impersonate individuals to bypass security systems and commit financial fraud.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by a human journalist intentionally using ElevenLabs' deployed voice cloning technology to bypass a bank's security system.
Added categories peak at 3: Substantial (Epistemic Harm, Inferred)
A journalist successfully bypassed Lloyds Bank's voice biometric security using a cheap AI voice clone from ElevenLabs. This incident exposes a systemic vulnerability in financial infrastructure across multiple major global banks, demonstrating how commercial AI tools can easily facilitate financial fraud and identity theft, warranting serious attention from economic security agencies.
The ElevenLabs voice cloning system acts as a tool, performing the specific function of generating synthetic audio based on direct user inputs without independent planning or decision-making.
Risk Level 3: Limited Risk. The system is used to generate synthetic audio (deepfakes), which falls under the category of AI-generated content requiring transparency obligations under the EU AI Act.
The primary function of ElevenLabs is to generate synthetic voices based on text inputs and voice samples.
The report is a first-hand account by the journalist who conducted the experiment, providing clear details and statements from the bank and regulators.
One could interpret this as a security failure of the bank's authentication system rather than an AI safety failure of ElevenLabs, though both are intrinsically linked.
Technology
Advanced AI Voice Cloning
ElevenLabs technology can clone voices with high accuracy and natural cadence.
Vulnerable Biometric System
Lloyds Bank Voice ID failed to distinguish synthetic voice from real voice.
Data Inputs
Publicly Available Voice Data
Only five minutes of audio was needed to train a highly accurate voice clone.
Compromised Personal Data
Date of birth was easily accessible due to past data breaches.
Human Factors
Overreliance on Voice Biometrics
Banks marketed voice biometrics as secure and unique like a fingerprint.
Process and Methods
Weak Multi-Factor Authentication
System only required easily bypassed voice biometrics and date of birth.
Lack of Liveness Detection
The authentication process did not verify if the speaker was live.
Management
Inadequate Risk Assessment
Management failed to anticipate rapid advances in AI voice cloning technology.
Insufficient AI Guardrails
ElevenLabs launched with minimal safeguards, allowing anonymous voice clones.
Regulatory Environment
Lack of Biometric Standards
No strict regulations governing the security of biometric authentication.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
