SERVANTSTACK // INCIDENT INTELLIGENCEFORENSIC IMAGE // VERIFIED FRAME

SS-IR-038 // INCIDENT REPORTReported

Steve Kramer / Lingo Telecom

AI Voice-Clone of Biden Robocalled Up to 20,000 NH Voters to Suppress the Primary

Q: Which governance control was missing?

Identity verification and dual control. A named reviewer verifies identity through a separate trusted channel before money, access, or public claims can move.

EXECUTIVE BRIEF

Two days before New Hampshire's January 23, 2024 Democratic presidential primary, an AI voice clone of President Joe Biden called New Hampshire Democrats and told them not to vote.

CHATBOTS & LLMs DEEPFAKES & FRAUD

FAILURE CHAINTRACE COMPLETE

01TRIGGERTwo days before New Hampshire's January 23, 2024 Democratic presidential primary, an AI voice clone of President Joe…
02MACHINE ACTIONFraud enabler
03MISSING GATEIdentity verification and dual control
04IMPACTFinancial harm

01 // INCIDENT SUMMARY

The short version

Two days before New Hampshire's January 23, 2024 Democratic presidential primary, an AI voice clone of President Joe Biden called New Hampshire Democrats and told them not to vote.

02 // KEY FACTS

Case telemetry

INCIDENT: SS-IR-038
DATE: January 21, 2024
SYSTEM: Steve Kramer / Lingo Telecom
LOCATION / SCOPE: New Hampshire, United States
EVIDENCE: Reported
AI ROLE: Fraud enabler
HARM: Financial harm
SOURCES: 4 cited records

03ENTRY POINT // WHAT HAPPENED

The event

Two days before New Hampshire's January 23, 2024 Democratic presidential primary, an AI voice clone of President Joe Biden called New Hampshire Democrats and told them not to vote. The cloned Biden urged recipients to "save your vote" for November, falsely implying that voting in the primary would forfeit their general-election ballot, and the calls were spoofed to appear to come from the personal number of a state party operative. Estimates of how many voters were reached range from roughly 5,000 (the volume Democratic consultant Steve Kramer admitted directing) to more than 20,000 (the New Hampshire Attorney General's estimate). Kramer commissioned the call for about $500 and was indicted on 13 felony counts of voter suppression plus 13 misdemeanor counts of impersonating a candidate. The FCC proposed a $6 million forfeiture against Kramer in September 2024; Lingo Telecom, the carrier that transmitted the spoofed traffic, settled with the FCC for $1 million on August 21, 2024 and agreed to enhanced caller-ID authentication. In June 2025 a Belknap County jury acquitted Kramer of all the felony charges.

04CAUSAL TRACE // AI'S ACTUAL ROLE

What the machine did

The Biden audio was synthetically generated. Forensic analyses by the security firm Pindrop and by UC Berkeley's Hany Farid attributed the cloned voice to the text-to-speech platform ElevenLabs, which at the time let a user clone a public figure's voice and produce convincing speech in minutes with no identity check, no consent verification, and no human review of who was being impersonated or what they were made to say. A single operator drove a script through a self-serve voice-cloning pipeline directly into a telecom carrier that performed no human validation of the call's authenticity, attestation, or content before transmitting it to tens of thousands of phones. At no point did a human gate stand between "generate a fake President" and "robodial it into a live election" -- the cloning vendor trusted the user, and the carrier trusted the traffic.

Fraud enablerAutomation was a causal participant—not a decorative label for the system around it.

05BLAST RADIUS // CONSEQUENCES

Where the failure landed

Up to 20,000+ New Hampshire voters received a deepfaked instruction to stay home from a sitting President's voice on the eve of a primary. The incident triggered a multi-state investigation, a $6 million proposed FCC forfeiture against Kramer, a $1 million FCC settlement and new authentication obligations for Lingo Telecom, felony indictments, and an FCC ruling that AI-generated voices in robocalls are illegal under the Telephone Consumer Protection Act. It became the canonical early example of generative AI weaponized for U.S. election interference and accelerated state-level deepfake-in-elections legislation. Kramer was ultimately acquitted of the felony counts in June 2025, underscoring how far enforcement lagged the technology.

06 // EVIDENCE STATUS

Reported

Documented in the cited public record. Follow the sources for the precise evidentiary posture.

SOURCE RECORD UPDATED 2026-07-09

07 // SOURCE LEDGER

4 cited records

01
Secondary / analysisNPR: Criminal charges and FCC fines issued for deepfake Biden robocalls
02
Secondary / analysisCyberScoop: Lingo Telecom agrees to $1 million FCC fine over AI Biden robocall
03
Primary / officialNew Hampshire DOJ: Steven Kramer charged with voter suppression over AI-generated Biden robocalls
04
Secondary / analysisNHPR: Political operative behind fake Biden robocalls found not guilty (June 2025)

08CONTROL FAILURE // MISSING GOVERNANCE

Identity verification and dual control

The failure pattern in this case: Unverified identity or synthetic media.

09INTERVENTION POINT // HUMAN IN THE MIDDLE

The moment the path could change

A named reviewer verifies identity through a separate trusted channel before money, access, or public claims can move.

AI PROPOSES→HUMAN OWNS THE DECISION→SYSTEM EXECUTES

10CONTROL DEPLOYMENT // AUTHORITYGATE

Identity verification · dual control

The AuthorityGate Operational Resilience framework forbids a synthetic voice or likeness of any real person from reaching a public distribution channel without a human SME validation gate that verifies (a) documented, written consent from the cloned individual and (b) sign-off on the exact script being voiced. A voice-clone-of-a-named-public-figure plus a high-volume outbound dialing job is precisely the high-impact change that AuthorityGate routes to a mandatory human reviewer before release: no identity-and-consent attestation on file, no generation; no SME approval of the specific words, no transmission. The same gate applies on the carrier side as a change-validation control -- mass spoofed-caller-ID traffic carrying synthetic audio cannot be transmitted on auto-attest, but is held until a human verifies caller-ID authentication and the campaign's authorization. Either gate -- the cloning step or the carrier step -- would have stopped a $500 self-serve job from impersonating the President into 20,000 live phones.

RELEVANT KEYSTONE CONTROLHuman-in-the-Loop ValidationHow high-risk actions route to a named subject-matter expert who owns the go or no-go decision.

12 // THE ALTERNATIVE

Autonomy is a design choice.

See the operating model that keeps AI useful while preserving human authority at consequential moments.

Compare AgenticAI and AugmentedAI →