The Ledger of Silent Calls: Voice Cloning, Football's Exposed Transfer Desk, and the Question of Verification

2:47 a.m. The landline in the Rangpur house rings. An unknown number on the display. I pick it up. No voice on the other end — only light breathing, then a click, then the line dies. Seven seconds of call, zero seconds of speech.

I spent three decades behind a microphone and 23 seasons coaching in the northern districts of Bangladesh. My ear is trained. In those seven seconds I heard nothing, and that was the most information-rich event of the night. A call that only wants to know whether a connection exists does not need a voice; it needs your answer. The purpose of a silent call is singular: to record whether a number is alive.

Let me put it in the language of the game. That was not an attack. That was scouting. A coach who watches an opponent's footage before entering the stadium and logs the running pattern of each of the eleven is doing exactly what those silent calls are doing — cataloguing your time, your habits, a fragment of your voice. I do not chase the ball; I audit the space it leaves behind. I wrote that line for a pitch. Tonight it applies to a telephone.

One thing before I go further, because my habit is verification before velocity. I logged that call; I did not announce it. All seven seconds are in my notebook — time, duration, volume of sound. This piece follows the same rule: arithmetic before narrative, ledger before feeling.

Context: 88 percent, 11 percent, and a two-month window

In January 2026 the security research firm Kaspersky published the results of a consumer survey. The window is narrow — December 2026 to January 2026, two months. The geographic scope is limited to users in Latin America. The two headline figures: roughly 88 percent of surveyed users received at least one unwanted call during that period, and roughly 11 percent of those unwanted calls were identified as bank fraud attempts or deceptive promotions.

A second number matters more, and it rarely makes the headline. Kaspersky's own report concedes that many of these silent or so-called ghost calls are simply the product of automated customer-service systems. The equation 'silent call equals criminal' is false. Some callers are harvesting numbers, some are connecting-dialling at scale, and a fraction are preparing an attack.

In 2026 I commentated on 14 Russia World Cup matches from a Dhaka studio, but the real work happened after midnight. I refused the tournament's new live passing-data feed until I had checked it against three recorded matches. The same rule applies here. The bigger a number, the more its ledger needs to stay open. To me, 88 percent and 11 percent are not facts; they are claims — and a claim demands verification.

The architecture of the attack: a two-stage job

The clearest way to read a silent call is to split it into two stages, the way a match splits into halves.

Stage one — reconnaissance. Here the attacker wants nothing, only accounts. Whether the number is live, what time a person answers, how many seconds they take to pick up, how long they speak, whether they respond at all. This is profile data, and it is not a password — when it is stolen, nobody notices.

Stage two — social engineering. This stage brings a voice, a manufactured emergency, a short number posing as a bank, the use of a familiar word. In Kaspersky's framing, fraudsters use overly generic identifiers, such as a caller ID that simply reads 'Bank'.

Find the football parallel in these two stages. On the pitch, stage one is reading an opponent's build-up pattern — who drifts left, who turns back to pass, which centre-back releases under pressure. Stage two is choosing the specific channel of attack with that information. A team that treats two stages as one concedes in the second. Telephone fraud works because most people never perceive the first stage at all — and what goes unperceived is preparation.

The empty stadium audit proved that silence has a pressing trigger. I first wrote that line about empty stands, where 40,000 vacant seats change the mechanics of applause. On a telephone the opposite happens: an empty voice creates pressure at the moment you decide not to answer. When someone receives a silent call and hangs up, they produce a data point — and that data point makes the list.

Voice-biometric accumulation: what the report under-weights

On one point I part company with the report, and the reason comes from outside football. Kaspersky explains that AI can clone a voice, and that the raw material is accumulated fragments. The headline, however, promises more: can a single call clone your voice?

I notice the gap between those two statements. A single 'hello' does not clone a voice; a voice has to accumulate. The risk is not singular, it is compounding. And that is where silent calls do their real work. Each one takes something from the microphone — very little at first, but repeatedly. If the same person answers the same number in the same manner over years, a sample set builds.

My notebook has four columns — minute, zone, trigger, consequence. Placing voice risk in that grid: the minute is unknown, the zone is the receiver, the trigger is answering, and the consequence lands much later, on the day someone calls a person you know, in your voice.

I know this pattern from coaching. A defender does not make his first error; he makes small errors that are individually invisible but accumulate into a goal hanging off a striker's boot. Voice accumulation works the same way — there is no damage in a single event, only in the count of events. That is why dismissing a silent call as trivial is a bad calculation.

Who writes the ledger: the question behind 88 and 11

Now the ledger rule. I began watching scores with a pen, on ruled paper. That training gave me a habit: with any number I ask who wrote the ledger, on what date, and what was omitted in the writing.

Kaspersky's two figures come from a commercial firm's consumer survey. The window is two months. The geography is Latin America. The publication window is December to January — the holiday season, when there are more calls, more delivery notifications, more temporary fraud campaigns than at any other time. None of this makes the number false, but none of it makes it eternal either.

In football this kind of accounting is familiar. If a side keeps three clean sheets in eight matches, nobody calls its defence unbeatable; we say the sample is small. Likewise, an 11 percent fraud rate gives direction, not permanence. The report itself concedes that many silent calls are benign automated systems — a self-correcting move worth imitating, because fear-driven journalism almost never shrinks its own number.

One caution on ledgers. A ledger looks neutral, but its neutrality depends on its author. We read a number and treat it as fact without asking who keeps the books. Every ledger follows the same rule — whoever controls the deposits and the withdrawals holds the real power.

Football's transmission paths: transfer desks, intermediaries, cloned voices

Now to the place where this subject meets football. Let me be explicit: the source report contains no club, no player, no transfer, no competition. What it contains is calling technology and its risk. The link to football is mine, and it stays labelled as inference.

In a club's coaching structure, which room is most exposed? The transfer window. Three ingredients sit together there — time pressure, high value, and phone-based negotiation between parties who may never have met. In an attacker's eyes, that is an ideal match-up.

I know how a phone rings at a transfer desk. One club sends a valuation, the other needs hours before the window shuts, and between them sits an intermediary who knows both sides. That arrangement is precisely where the pattern described in the source succeeds — manufactured urgency, a familiar name, and an apparently fast way to verify.

A transfer is not a fee; it is a system changing its address. That line was written for football, but its meaning has widened: when a transfer is a phone call, the security of that call becomes part of the strategy.

The second transmission path is player likeness. A footballer's voice and image are commercially valuable — in advertising, in promotion, and most worryingly in betting-adjacent content. In a world where an exact video copy is easy, a fake endorsement built on a cloned voice is a matter of time. And here I must repeat a long-held position: the pipeline that sends live data to betting companies is the darkest side effect of the sport's datafication, because speed outruns duty and verification loses its window.

The third path is fan money. To a supporter a club's name is a belief, and belief is the easiest nickname for fraud. Fake tickets, fake kits, fake player meet-and-greets — each has a telephone-based link that can begin with a silent call.

The fourth path is structural, and to me the most important. Football institutions hold player data, fan data and transfer documents, yet the security of that accumulation is rarely discussed. Multi-club ownership and cross-border transfers complicate the picture further. Where parties have never seen each other, identity becomes an assumption — and the largest deals rest on that assumption.

The attestation layer: where a ledger genuinely helps

Now the question I sat down to write about. Is the fix individual vigilance, or structural verification?

The source report's advice is brief, measured and correct: hang up, then verify through a channel you already knew beforehand. Dial the bank's official number yourself. Do not trust an inbound emergency.

I do not dispute that advice. But I run the arithmetic. It shifts the entire burden of verification onto one person, and that burden is unevenly distributed — a fraudster needs one successful call, while a consumer needs a correct decision every time. In football terms, that is making the goalkeeper responsible for the whole match.

The real leverage sits several layers down, at the call-attestation layer. If a call's identity is cryptographically signed — if the call can prove it holds the key to the identity it claims — then a forged identity does not merely get described, it fails mathematically. This is where distributed-ledger or blockchain-based verification frameworks become genuinely relevant.

But I add a caveat immediately, and it is part of my ledger rule. A signed caller identity helps, and on its own it is not a solution. Two reasons. First, someone must be able to read what a signed bank identity means — what the signature proves and what it does not. Second, whoever writes the registry and holds the power to revoke signed documents holds the actual control. If a distributed ledger drifts back toward a single author, it is not a ledger; it is a dressed-up account book.

Here a coordinate is needed, and I always flag a coordinate — I am not claiming that blockchain-based call attestation is live anywhere today. I hold no verified data on that for this region, and I do not move on unverified claims. What I hold is a principle: where the ledger is written, the power sits. In football that principle is true twice — once at the transfer desk, once in the data-supply contract.

The empty-ground lesson: whose shoulder carries the burden

The counter-intuitive view, and one that makes me a little uncomfortable. My habit is to demand evidence, and evidence is usually buried inside the system. But on a consumer-protection question, sporting neutrality becomes a little too comfortable.

The problem in the source report is not a factual error. It is that the remedy is placed in the individual's hands rather than the structure's. If the duty to stop spoofed calls sat at the telecom layer — call-attestation standards, cross-border enforcement, bank-side out-of-band verification — the problem would have far less room. But the language of attack always finds it easy to blame the individual, because training a person is cheap and changing an architecture is expensive.

I count by my notebook's columns. Stage-one data: the moment, unknown. Stage-two trigger: the ringing phone, known. Consequence: money, known. But one column stays empty — the column of responsibility. Who takes it? That cell is blank. And whole decisions stall on a blank cell.

The empty stadium audit proved that silence has a pressing trigger. I use the line a second time, now in another sense — when silence stays unresponsive, power shifts to the responsive party. That is equally true of a pitch and of a telephone.

Where I was wrong

I began this piece with a call note. I should end it with a correction, because correction is part of the evidence in my ledger, not a source of shame.

First correction. At the start I treated silent calls as one stage of organised fraud. Reading the source report, I saw the picture is less simple. Many silent calls are the output of benign automated systems. What I received in seven seconds may have been a connection test from an innocent system. That possibility belongs in my notebook, because treating every silence as a threat is the biggest mis-signal of all.

Second correction. I initially thought telephone fraud was purely an individual moral problem. From a pitch-side angle it is mainly a structural protection gap. Where no signed path of verification exists, people will naturally take the easiest route of trust. You cannot change that behaviour with pressure; only with the key of attestation.

Third correction, and the most important. I first treated the two figures — 88 and 11 percent — as final. My note now reads: a single commercial firm, a two-month window, Latin America. Any independent telecom regulator or law-enforcement release could change the picture. I am waiting for that release, and the waiting is part of my method.

The verification question, and the next window

Data speaks louder than commentary. So I close with a small count. Match counts: fourteen matches, nineteen pages. Fourteen matches fit into nineteen pages if you cut every excuse. The discipline is practice, not imagination. Call-verification records written the same way — date, window, author, omissions — would themselves weaken the numbers, exactly where they need weakening.

So what comes next? I set a date and wait. For football, my next verifiable claim is simple: if in the coming transfer window any club publicly discloses a voice-impersonation incident — a fake intermediary, a fraudulent call in a cloned voice — I will write it. If no club discloses, that is itself information: silence is also an announcement.

On the telecom side I will watch two things. One, whether any independent regulator publishes figures close to, or far from, 88 and 11 percent. Two, whether any country mandates call attestation, and if so, who writes that ledger. The second question is to me the equivalent of a formation question — real change comes from the system, not the slogan.

A single silent call is noiseless. But if it is the product of three years of accumulation, that accumulation deserves an audit. On a football pitch I learned that before every goal there is a run nobody recorded. Tonight's silent call is that run, and that is precisely why the subject feels so much like the pitch.

My notebook does not record goals; it records the runs that made them inevitable. This window, my notebook will keep those runs.

— Written by me, in February 2026, in Rangpur. An old coach.