AI Regulation Tracker  /  Regulation in force

FTC Impersonation Rule Puts AI Voice-Cloning of Brands and Executives in Federal Court

Since April 1, 2024, the FTC can sue over AI-driven impersonation of businesses and government under 16 C.F.R. Part 461 and ask a court for money back for victims. A separate proposal to cover impersonation of individuals is still pending.

By Anthony Guerriero  ·  Reviewed by The Leveraged Years Editorial Desk  ·  Published July 7, 2026  ·  Last updated July 7, 2026

AI-driven impersonation of a company or a government agency is now something the Federal Trade Commission can take straight to federal court. The agency's Rule on Impersonation of Government and Businesses, codified at 16 C.F.R. Part 461, took effect April 1, 2024. It gives the Commission a direct enforcement path against anyone who materially and falsely poses as a government body, a business, or one of their officials or agents in commerce.

What the rule actually does

Before this rule, the FTC often had to work through slower procedures to recover money for people harmed by impersonation fraud. Part 461 changes that. Because impersonation is now defined as a violation of an FTC trade regulation rule, the Commission can sue in federal court in the first instance and ask for monetary relief and civil penalties. The rule reaches classic scams, such as a fake account or spoofed website posing as a real company, and it reaches newer methods, including cloned voices and synthetic likenesses used to make the deception convincing. The conduct is what matters, not the tool, so a deepfaked earnings-call clip of a chief executive and a plain email spoof are treated on the same legal footing.

Who is exposed

Two groups should pay attention. The first is any business whose brand, trademarks, or executives can be copied. A cloned voice of a finance chief authorizing a wire, a fake support line impersonating a bank, or a deepfaked partner in a legal matter all fall within the kind of conduct the rule targets. The second group is vendors that build generative-voice and avatar tools. The FTC has signaled that firms providing the means to impersonate can face scrutiny where they know or have reason to know their products are being used for it. That is a live design and diligence question for any company shipping voice-cloning or avatar features. It also reframes an ordinary customer-security problem as a regulatory one: a spoofed brand line or a cloned executive is no longer just a fraud headache to absorb quietly, but conduct the federal government can pursue, and conduct that regulators will expect a serious firm to have anticipated.

What it does not do yet

The rule as written covers impersonation of government and businesses. It does not yet cover impersonation of private individuals. The FTC issued a supplemental proposal to add an individual-impersonation prohibition and held an informal hearing on it on January 17, 2025, but that amendment is not final. So a person cloned in a scam who is not standing in for a business or government official does not yet have this specific rule behind them, though other laws may apply. Treat the individual-impersonation expansion as proposed and pending, not settled law.

This rule is also distinct from two things it is often confused with. It is not the FTC's policy statement on suppression of model-output accuracy, which concerns what AI systems say, not who they pretend to be. It is not the Take It Down Act, which targets nonconsensual intimate imagery takedowns. Part 461 is about impersonation and deepfake fraud, full stop. Keeping these three separate matters in practice, because a compliance response calibrated to one of them will miss the others.

One more limit is worth stating plainly. The rule reaches the impersonation itself. It does not, on its own, resolve every downstream question about who pays when a cloned voice authorizes a fraudulent transfer, which still turns on contract terms, banking rules, and ordinary negligence law. The value of Part 461 is that it adds a federal enforcer with a fast route to court and to money, not that it settles private liability between a defrauded firm and its bank or vendor.

The practical read for professionals

For a compliance officer or general counsel, the shift is that impersonation of your organization is now a federal matter with a faster route to court and to money damages. That raises the value of two routine tasks. First, know where you are impersonated. Map the accounts, domains, phone lines, and voice or video likenesses of your firm and its leaders that a fraudster would target. Second, be ready to report. Keep a clean path to file with the FTC at reportfraud.ftc.gov and to escalate to platforms, and preserve evidence in a form investigators can use.

For an advisor, insurer, or firm building AI voice or avatar features into a product, the exposure runs the other way. Build reasonable checks against your tools being used to impersonate real businesses, and document them. The rule rewards firms that can show they took impersonation risk seriously and did not look away.

Browse the full AI Regulation News tracker

Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.