Saying “yes” on the phone, on its own, is very unlikely to get you scammed in the way viral warnings suggest. A recorded “yes” cannot legally authorize charges or lock you into a contract, because federal law requires an electronic signature to be tied to a specific agreement and made with the intent to sign it. The real risks from these calls are quieter: you’ve confirmed your number reaches a live person, and you may have handed over a voice sample that modern AI tools can clone.
What the Caller Actually Gains
The opening question is designed to get you talking. It might be “Can you hear me?” or “Is this [your name]?” or “Are you the homeowner?” The instant you answer, the caller has confirmed that your number reaches a real person who picks up unknown calls. That verified number gets added to lists sold to other scammers, which is why one suspicious call often turns into dozens.
There’s a secondary worry that a recorded “yes” could be spliced into a fake authorization for charges on your phone bill, a practice called cramming. Cramming is illegal, and phone companies are required to investigate and reverse unauthorized charges. Watching your bill after a suspicious call is a reasonable precaution. Panicking that the word itself created a debt is not.
Why a Recorded Yes Cannot Bind You to a Contract
Federal law defines an electronic signature as “an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record.”1Office of the Law Revision Counsel. 15 USC 7006 – Definitions Two elements have to be present: the recording must be connected to a specific contract, and you must have intended to agree to it. Answering “Can you hear me?” satisfies neither. No terms were presented, and your intent was to confirm audio, not to authorize a purchase.
State law reinforces this. The Uniform Electronic Transactions Act, adopted in some form by most states, requires that both parties agree to conduct business electronically. A scammer secretly recording you during a cold call doesn’t meet that standard. Even in legitimate automated systems where a spoken “yes” completes a transaction, the law expects you to know your response will be treated as authorization and to be free to refuse.
If someone later claims you “agreed” to something based on a recorded call you don’t remember authorizing, the claim has no legal teeth. Dispute any resulting charge promptly, and the legal framework is on your side.
The Bigger Risk: AI Voice Cloning
While the “can you hear me” scam gets the headlines, AI-powered voice cloning is the more serious threat behind getting you to speak. Modern cloning tools need only a few seconds of recorded speech to produce synthetic audio that sounds convincingly like the original speaker. Scammers pull samples from social media videos, voicemail greetings, podcast appearances, and phone calls where they got you talking.
The cloned voice is then used to impersonate you or someone you trust. A common version targets families: you get a frantic call that sounds exactly like your child or grandparent, claiming they’re in trouble and need money wired immediately. The FTC has specifically warned consumers about this tactic and advises that if you receive such a call, you should hang up and contact the person directly at a number you already have for them.2Federal Trade Commission. Fighting Back Against Harmful Voice Cloning
Voice biometrics used by some banks add another layer of risk. These systems verify identity by analyzing voice characteristics during calls. A sophisticated deepfake generated from a recorded sample could potentially fool older versions of these systems, though most financial institutions have added liveness detection and other safeguards to counter this threat.
What to Do If You Already Said Yes
If you answered “yes” to a suspicious caller but shared no financial or personal details, your main exposure is more scam calls. Watch your phone bill over the next few billing cycles for unfamiliar charges, and dispute anything you didn’t authorize.
If you shared financial information like account numbers, card details, or banking credentials, move fast. Contact your bank or card issuer immediately to report the exposure and request new account numbers or cards. Federal law caps your liability for unauthorized electronic fund transfers at $50 if you report within two business days of learning about the problem. Wait longer and that cap rises to $500. Let more than 60 days pass after a statement showing the unauthorized transfer, and you could be on the hook for the full amount.3GovInfo. 15 USC 1693g – Consumer Liability Credit cards offer stronger protection under separate rules, typically limiting you to $0 liability for unauthorized charges reported promptly.
If you shared personal identifying information like your Social Security number or date of birth, place a credit freeze with all three major bureaus: Equifax, Experian, and TransUnion. Under federal law, freezes are free, must be placed within one business day of your request, and must be lifted within one hour when you ask.4Federal Trade Commission. New Federal Law Allows Consumers To Place Free Credit Freezes A freeze prevents anyone from opening new credit accounts in your name, which is the most common form of identity theft damage.
Change passwords for any accounts that might have been exposed, especially if you reuse passwords across services. Enable two-factor authentication where you can; it adds a layer of protection that a stolen password alone can’t defeat.
Where to Report the Call
Reporting feeds enforcement databases that agencies use to build cases against scam operations. File with more than one agency since each serves a different function.
- Report fraud, scams, and bad business practices to the FTC at ReportFraud.ftc.gov. The FTC uses these reports to identify patterns and pursue enforcement actions.5Federal Trade Commission. ReportFraud.ftc.gov
- File complaints about unwanted calls, spoofing, and robocalls with the FCC at fcc.gov/complaints. The FCC doesn’t resolve individual complaints but uses them to inform enforcement priorities and policy.6Federal Communications Commission. Filing an Informal Complaint
- If your personal information was compromised, use IdentityTheft.gov. The FTC site walks you through a personalized recovery plan with checklists and sample letters for disputing fraudulent accounts.7Federal Trade Commission. Report Identity Theft
The simplest defense going forward is also the most effective: if a call feels off, hang up. You can always call the organization back using a number from their official website or the back of your card.