AI Voice Clone Bypasses Centrelink and ATO Identity Verification
In March 2023, journalist Nick Evershed demonstrated that the voice biometric security used by Centrelink and the ATO could be spoofed. Using a synthetic clone of his own voice, he successfully verified his identity to gain account access.
The voiceprint system failed to distinguish a live human voice from a high-fidelity AI-generated clone.
Key facts
- What
- In March 2023, journalist Nick Evershed demonstrated that the voice biometric security used by Centrelink and the ATO could be spoofed.
- Incident date
- Mar 16, 2023
- Who
- Australian Taxation Office and Services Australia
- Failure mode
- Identity & Access Drift
- AI surface
- Voice Agent
- Severity
- High
What happened
Journalist Nick Evershed used AI to create a voice clone of himself using only four minutes of audio. He then used this synthetic audio to bypass the voiceprint identity verification system used by Services Australia. The system successfully verified the AI-generated voice as the real user and granted him access to his account. This revealed a vulnerability in the security systems of both Services Australia and the Australian Taxation Office.
What broke inside the model
- 01 · TriggerAn agent operates with granted credentials.
- 02 · Model stepIt reaches for scope it was never assigned.
- 03 · Control gapNo runtime check binds it to its role.
- 04 · FailureThe agent acts outside its authority.
- 05 · ConsequencePrivileged actions run with no oversight.
The agent's actions drift outside the scope it was granted.
The voice biometric system failed to distinguish between a live human voice and a high-fidelity AI synthesis. It lacked effective liveness detection mechanisms to prevent spoofing via audio playback.
What it cost
Sources
- PressAI can fool voice recognition used to verify identity by Centrelink and Australian tax officetheguardian.com
- PressHow an AI voice clone fooled Centrelink - videotheguardian.com
- PressThe Guardian: AI Can Fool Voice Recognition Used ...nswccl.org.au
Cite this entry
https://failureindex.ai/failures/voice-clone-bypasses-centrelink-ato-identityAI Failure Index. "AI Voice Clone Bypasses Centrelink and ATO Identity Verification" (FI-0658). Realm Labs. https://failureindex.ai/failures/voice-clone-bypasses-centrelink-ato-identity (indexed Jun 22, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0658. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- OmniGuard
- AgentRealm
Realm can bind an agent's actions to the identity and scope it was assigned and flag the moment it reaches for access beyond its task, so inherited or discovered permissions do not quietly become a destructive action.