Voice Conversion
Changing who a recording sounds like while keeping what was said — useful, and the same technology as the fraud.
When not to use it
- Expecting a clean content/speaker split. There isn't one. Prosody is both, and the answer depends on why you're asking.
- With a bottleneck tuned by feel. Too wide and identity leaks; too narrow and you lose phonemes. It's the whole method.
- Relying on detection to catch misuse. Same structural loss as deepfakes. Provenance or nothing.
- Assuming a few seconds isn't enough. It is. That's shipping, and your voice is online.
Reach for something else instead
- Text-to-speech — if you have the text, generate rather than convert.
- Speech-to-speech models — the general system that absorbs this.
- Voice anonymisation — the same tech pointed at privacy.
- A family code word — for the fraud case, this is the actual defence.
Sources & further reading
- Qian et al. (2019), AutoVC: Zero-Shot Voice Style Transfer with Only Autoencoder Loss — disentanglement by capacity constraint, not adversarial loss.
- Kaneko & Kameoka (2018), CycleGAN-VC: Non-parallel Voice Conversion Using Cycle-Consistent Adversarial Networks — the cycle trick, from image style transfer.
- Tomashenko et al. (2020), Introducing the VoicePrivacy Initiative — voice conversion as an actual privacy tool, which is the underrated use.
Primary sources, listed so you can check the claims on this page rather than take them on trust.
Where people go wrong
- Treating conversion and cloning as different technologies. Same capability, two angles, same endpoint.
- Expecting disentanglement to be learned cleanly. There's no ground truth for which part of a waveform is identity.
- Transferring prosody without deciding whether you meant to. It's the source's cadence in the target's voice, and it's uncanny.
- Betting on detection. The generator's objective is to defeat it.