‍When AI calls: In-call Training for Maximum Awareness

December 12, 2025

Imagine this. You’re in the middle of your workday when your phone rings. IT support flashes on the screen. The voice on the other end sounds calm, professional, and just a little urgent: “There’s a critical security issue affecting your account. We need to reset your password right now. Otherwise, your access will be suspended under the emergency protocol.”

You pick up, say “Okay, what do I need to do?” and the caller asks you to confirm your current password or to read a verification code out loud. Without thinking, you tell them the code or the password, or you say “Yes, go ahead” to give them permission to proceed. Then the voice pauses: “Hold on. That was a deepfake. Let’s rewind for a moment.”

This is revel8’s in-call training: a next-generation awareness experience that doesn’t just tell you how attacks work. It lets you feel them.

Scenario 1: the password reset call

One of the most effective simulations starts with a call from IT support. The voice warns about a critical security issue and urges the listener to change their password immediately. Everything sounds legitimate: the tone, the phrasing, even the background office noise.

Then, as soon as the user starts to comply, the training voice interrupts: “You just experienced a deepfake call. Did you notice the urgency? The authority cues? The lack of verification?”

In that moment, the learner connects emotion and insight. This creates a “hot cognition” effect: learning that sticks because it’s felt, not just explained. Employees remember how it felt to be pressured and recognize it faster next time.

Scenario 2: the CRM System update

In this scenario, the call sounds routine. The voice says: “Your CRM system is temporarily locked due to a failed update. Please share your password so we can restore access.”

It feels harmless, almost helpful. That’s what makes it effective. When the user complies, the AI coach immediately cuts in: “Would your IT team ever ask for your password verbally? Probably not. Let’s break down what happened.”

That short, reflective moment transforms a mistake into a lasting memory. By simulating a familiar work situation, employees build natural resistance to manipulation disguised as routine procedure.

Scenario 3: The system update call

Here, the attacker doesn’t even sound human. An automated voice warns that a vulnerability could compromise your data unless you press 1 to confirm an update. It’s fast, emotionless, and surprisingly convincing. revel8’s AI replicates this perfectly, showing how automated voice scams exploit reflex rather than reasoning.

After the call, the training voice explains: “Automation can sound trustworthy - but real IT never asks for input through a call menu.”

The result is instant awareness of subtle manipulation patterns. Employees become more critical of automated systems and learn to verify first before reacting.

Hyper-efficient learning through emotional realism

revel8’s in-call training works because it teaches in the same emotional state where attacks succeed. Each simulation triggers a real psychological response (urgency, authority, pressure) and then interrupts it at the decisive moment. A short, calm AI reflection follows immediately, while the learner’s emotional system is still active. This experience-interruption-reflection loop builds instinct far faster than quizzes or slide-based training. Employees don’t just understand manipulation. They feel it, recognize it, and remember it. By combining behavioral psychology with adaptive AI coaching, in-call training turns high-pressure moments into lasting resilience.

Why this matters now

Deepfake voice scams are rising rapidly. Companies are facing real losses from impersonated executives, finance staff, or IT support calls. At the same time, compliance frameworks like NIS2 and ISO 27001 demand measurable, outcome-driven awareness training, not passive e-learning. In-call training delivers both. It proves behavioral change through measurable engagement and creates unforgettable “aha” moments that shift how employees respond under pressure. With deepfake voice attacks becoming a new normal, emotional preparedness is the next layer of cybersecurity defense.

The human firewall, upgraded

At revel8, we believe awareness shouldn’t feel like a lecture. It should feel real because real situations are where the stakes are highest. When employees experience a fake before a real one, they’re ready. That’s what makes in-call training not just innovative, but necessary. Ready to hear what it feels like to fall for a deepfake and learn instantly from it? Book a demo and experience revel8’s in-call simulation for yourself:revel8.ai/demo.

FAQ: In-call training and deepfake awareness

What is in-call training?

In-call training is a simulated voice-based cybersecurity exercise where employees receive AI-generated calls that mimic real social engineering or deepfake attacks. The training reacts in real time, guiding users through what just happened and helping them recognize manipulation tactics like urgency, authority, and trust exploitation.

How does revel8 create deepfake calls?

revel8 uses secure AI voice synthesis technology to generate realistic calls that sound like IT support, vendors, or internal colleagues. The goal is not to deceive but to safely expose employees to realistic threat situations so they can identify them in the real world.

Why is in-call training more effective than traditional phishing simulations?

Voice-based attacks trigger stronger emotional responses than email simulations. In-call training activates stress and compliance reflexes (the same factors exploited in real attacks) and teaches employees to pause, verify, and think critically. This leads to faster, longer-lasting behavior change.

Does in-call training help with NIS2 or ISO 27001 compliance?

Yes. revel8’s training generates measurable results, showing demonstrable improvements in employee awareness and behavioral response, which can be used to document compliance with cybersecurity training requirements.

Is the training safe and GDPR compliant? 

Absolutely. All simulations are anonymized, securely hosted, and designed for educational purposes only. No personal data is stored beyond the necessary analytics to track learning progress and effectiveness.

Can the scenarios be customized?

Yes. Each organization can tailor the call content, voice profiles, and difficulty level to reflect real internal communication styles and typical risks within the company.