If you have tried any AI audio tools recently, you know it takes about 10 seconds of recorded voice to clone someone's speech. A podcast appearance, a voicemail, a conference presentation. That is all it takes.
Now imagine that voice calling your front desk.
In April 2026, the American Medical Association called for formal protections against deepfake impersonation of physicians, warning that AI-generated audio and video are being used to mislead patients, influence clinical decisions, and access protected health information. This is not a theoretical risk. It is happening now.
The Economics Have Changed
A targeted healthcare phishing campaign using AI tools can be assembled for under $200 a month. The voice sounds real. The caller ID looks right. The request sounds routine. Your billing department, your front desk, your office manager have no reason to question it.
According to industry data, AI-driven vishing attacks surged over 1,600% in early 2025. Healthcare is a primary target because of the combination of sensitive patient data, high-pressure environments, and staff trained to respond quickly to physician requests.
Why Traditional Training Falls Short
Most security awareness programs were designed around email phishing. Spot the suspicious link. Check the sender address. Do not open unexpected attachments. These are important skills, but they do not prepare staff for a phone call that sounds exactly like the doctor they work with every day, or a video call that looks like a trusted vendor.
The attack surface has expanded beyond the inbox. Voice and video are now active channels for social engineering, and most healthcare practices have no protocol in place to verify identity through these channels.
What This Means for Dental and Small Healthcare Practices
Large hospital systems are investing in AI-powered detection tools and multi-channel verification platforms. Small and mid-size practices do not have those resources, but they face the same threats.
At Vert Noir Corp, we work with dental practices in the Seattle and greater Washington State area on exactly this challenge. Our managed security and HIPAA compliance services include staff security training that goes beyond email phishing scenarios to cover voice and video-based threats. We help practices build simple verification protocols that staff can follow when something does not feel right, without disrupting patient care or daily operations.
What Practices Can Do Now
The good news is that defending against voice and video attacks does not require expensive technology. It requires awareness and process.
Establish a verbal verification protocol for any request involving patient data, financial transactions, or system access changes. If someone calls claiming to be the doctor and asks for records to be sent to a new address, staff should have a clear process to verify that request through a separate channel before acting.
Include voice and video scenarios in regular security training. Staff who can identify a suspicious email may still authorize a fraudulent request over the phone simply because the voice sounds familiar.
Review which staff members have publicly available audio or video. Conference recordings, podcast appearances, and social media content all provide source material for voice cloning.
The Bigger Picture
AI is changing how attacks work. The tools are cheap, accessible, and improving rapidly. Healthcare practices that only train for yesterday's threats are leaving their most vulnerable channels unprotected.
Security and compliance are ongoing commitments, built into how a sustainable business operates every day. The practices that recognize this early will be better prepared for what comes next.
About Vert Noir Corp
Vert Noir Corp provides managed security and HIPAA compliance services for dental practices in the Seattle metropolitan area, including King, Snohomish, and Pierce counties. Our services cover Security Risk Assessments, Business Associate Agreement management, staff security training, network security, and continuous monitoring. We are a certified Fortinet partner based in Washington State.