Poster: Exploring the Limits of Audio-Based Detection of Turkish Phone Call Scams
Summary
This paper introduces the first public multimodal dataset of 100 Turkish scam and benign phone calls, evaluating seven LLMs under raw audio, ASR transcripts, and human-corrected transcripts. Results show transcript-based inputs outperform direct audio, highlighting the need for inclusive AI safety research in low-resource languages.
View Cached Full Text
Cached at: 06/24/26, 07:47 AM
# Poster: Exploring the Limits of Audio-Based Detection of Turkish Phone Call Scams Source: [https://arxiv.org/html/2606.24523](https://arxiv.org/html/2606.24523) ###### Abstract Scam phone calls exploit vulnerable communities worldwide, yet research on detection has focused almost exclusively on English and other high\-resource languages\. In low\-resource settings such as Turkish, detection is especially difficult, as annotated data is scarce and technological defenses remain limited\. This research investigates how large language models \(LLMs\) can support scam detection in Turkish by introducing the first public multi\-modal dataset of 100 aligned audio\-transcript pairs of scam and benign conversations\. We evaluate seven LLMs spanning three model families: Gemini 2\.5 \(Flash, Flash\-Lite, Pro\), GPT\-4o, and Qwen \(Max, Plus, Turbo\), under three input conditions: raw audio, automatic speech\-to\-text transcripts, and transcripts refined by a native speaker\. Our results suggest that transcript\-based inputs consistently outperform direct audio processing, while human\-corrected and uncorrected transcripts perform comparably\. By centering a low\-resource language and real world threat, this work highlights the urgent need for culturally and linguistically inclusive AI safety research and more robust multi\-modal systems for fraud prevention\. ## 1Introduction Phone scams are one of the fastest growing forms of fraud, exploiting millions of victims worldwide each year\. Their impact is not only financial, but also psychological, as scammers manipulate trust, authority, and urgency in ways that make detection difficult\. While governments and industry have invested in countermeasures, most technical solutions remain limited to English or other high\-resource languages, leaving many communities without effective protection\. At the same time, research on scam detection has been dominated by transcript\-based natural language processing \(NLP\)\. These approaches assume that lexical information is sufficient to reveal intent, but in practice much of a scammer’s strategy relies on affective and prosodic cues, such as intonation, stress, or vowel lengthening, that are weakened or lost when speech is reduced to text\. Addressing this gap requires methods that integrate both audio and transcript modalities, especially in low\-resource languages\. Turkish itself poses unique challenges: despite being spoken by millions, it is underrepresented in AI research\. Turkish challenges ASR due to its agglutinative morphology and wide variation from formal to colloquial speech\[[2](https://arxiv.org/html/2606.24523#bib.bib2)\]\. In order to address this, we introduce the first public multi\-modal dataset of Turkish scam and benign calls, consisting of 100 aligned audio and transcript pairs\. We evaluate LLMs under three input conditions, as shown in Fig\.[1](https://arxiv.org/html/2606.24523#S4.F1), to examine how transcription quality and model safety systems shape performance\. ## 2Existing Solutions LLMs have shown promise for text\-based scam detection, with studies demonstrating proficiency in identifying phishing signs in emails, though work on phone call transcripts reveals challenges such as low recall and model hallucinations\. Prior work has mostly focused on English or Chinese and often relies on edited transcripts and purely textual inputs\. For instance, Shen et al\.\[[1](https://arxiv.org/html/2606.24523#bib.bib1)\]and Zhao et al\.\[[3](https://arxiv.org/html/2606.24523#bib.bib3)\]explored mainly Chinese datasets without considering multimodal signals\. These approaches overlook both the multimodal nature of scams and the realities of under\-resourced languages which are critical for more inclusive AI safety research\. ## 3Dataset The dataset contains 100 Turkish phone call recordings collected from publicly available YouTube videos, balanced between 50 scam and 50 benign calls, with all audio normalized to 16 kHz mono\. The scam calls were sourced from YouTube videos explicitly identified as scam calls by their uploaders, and were further reviewed by a native Turkish speaker to confirm the fraudulent nature of the content\. The scam calls cover a broad range of tactics observed in Turkey, including financial and identity fraud \(e\.g\., banking, stolen cards/IDs, government bills, top\-up credit, payment issues, insurance, and prize scams\) as well as service\- and employment\-related fraud\. ## 4Proposed Method Audio fileLLMPredictionMethod 1\(Raw Audio\)Audio fileASR \(Scribe V1\)TranscriptLLMPredictionMethod 2\(Unchecked Transcript\)Audio fileASR \(Scribe V1\)TranscriptNative speaker reviewLLMPredictionMethod 3\(Checked Transcript\)Figure 1:Three input conditions evaluated in this study\.Our proposed approach is Method 1, in which raw audio is forwarded directly to a multimodal LLM for scam detection without any preprocessing\. Methods 2 and 3 serve as comparison baselines using text\-based input\. In Method 2, audio is first converted to text via the Scribe V1 ASR system and passed to the LLM without correction\. In Method 3, the ASR transcript is further reviewed and corrected by a fluent Turkish speaker before being passed to the LLM\. We evaluate each of the 100 calls independently under all three input conditions, with no fine\-tuning or prompt optimization performed between samples\. This ensures that the results reflect standard behavior rather than a tuned pipeline\. ## 5Results and Discussion Our analysis reveals distinct performance patterns across modalities, as shown in Table[I](https://arxiv.org/html/2606.24523#S5.T1)\. Across all seven models, transcript\-based inputs outperform raw audio, with mean F1 scores of 0\.995 for checked transcripts and 0\.992 for uncorrected transcripts compared to 0\.969 for Audio\. The average drop from Trans to Audio is 0\.026 F1 points, while Trans and UN\-Trans differ by only 0\.008 on average, suggesting that ASR quality has minimal impact once a transcript exists\. A recurring failure mode in audio conditions across all model families is the refusal to process calls containing profanity or sensitive themes, such as police impersonation or extortion\. Since real\-world scams frequently rely on such intimidation tactics, these refusals are counted as false negatives and account for the bulk of the audio performance gap\. In contrast, the same content passed as text is less likely to trigger content filters, which explains the stronger transcript results\. The audio failures point to two likely causes\. First, content\-filtering refusals are triggered by raw vocal signals \(shouting, profanity, aggressive tone\) that do not cause the same reaction in text form\. Second, some models may struggle to parse overlapping speech and background noise common in real call recordings\. Furthermore, during the analysis of Qwen Audio pipelines we observed hallucination artifacts likely originating from subtitled video in its training data, which could inject misleading tokens that distort downstream classification in low\-resource settings\. TABLE I:Model Performance of Different LLMs Handling the Three Types of Data ## 6Conclusion This study suggests that transcript\-based inputs consistently outperform raw audio for Turkish scam call detection across all evaluated LLMs, with mean F1 scores of 0\.99 for both Trans and UN\-Trans compared to 0\.97 for Audio\. Crucially, human\-corrected and uncorrected transcripts perform nearly identically, suggesting that the cost of native speaker review may not be justified for detection purposes\. The audio performance gap is primarily driven by content\- filter refusals on calls involving profanity, intimidation, and police impersonation, which are the very tactics that characterize real scams\. This reveals a fundamental tension between model safety mechanisms and practical utility in adversarial detection tasks\. Several limitations of this study warrant consideration\. The dataset, while the first of its kind for Turkish scam detection, consists of 100 calls, and the high F1 scores may partly reflect its current scope in terms of data size and diversity\. Dataset artifacts such as inconsistent audio quality and uploader labeling conventions may have influenced model performance as well\. Expanding the dataset and evaluating robustness across broader real\-world conditions remain important directions for future work\. ## References - \[1\]Z\. Shen, S\. Yan, Y\. Zhang, X\. Luo, G\. Ngai, and E\. Y\. Fu, “It warned me just at the right moment: Exploring LLM\-based real\-time detection of phone scams,” in*Proc\. Extended Abstracts CHI Conf\. Human Factors in Computing Systems*, 2025, pp\. 1–7\. - \[2\]K\. Tohma and Y\. Kutlu, “Challenges encountered in Turkish natural language processing studies,”*Natural and Engineering Sciences*, vol\. 5, no\. 3, pp\. 204–211, 2020\. - \[3\]Q\. Zhao, K\. Chen, T\. Li, Y\. Yang, and X\. Wang, “Detecting telecommunication fraud by understanding the contents of a call,”*Cybersecurity*, vol\. 1, no\. 1, p\. 8, 2018\.
Similar Articles
Dialogue to Detection: A Multimodal Hybrid NLP Pipeline for Insurance Fraud Detection
This paper presents a synthetic multimodal framework for insurance fraud detection at the first notice of loss (FNOL). It generates dialogue transcripts and two-speaker audio, combining ASR, NER, LLM-RAG, and speaker embeddings into a rule-based risk scoring system.
A Survey of Large Audio Language Models: Generalization, Trustworthiness, and Outlook
A comprehensive survey reviewing the trustworthiness challenges of Large Audio Language Models (LALMs), including vulnerabilities like cross-modal jailbreaking and acoustic backdoors, and proposing a defense-in-depth roadmap.
Detecting Alarming Student Verbal Responses using Text and Audio Classifier
This paper presents a hybrid framework for detecting alarming or distressed student verbal responses by combining a text classifier (content-based) and an audio classifier (prosodic features), aimed at expediting human review in Automated Verbal Response Scoring systems. The approach addresses a safety gap in automated scoring pipelines where at-risk student responses may otherwise go unnoticed.
Benchmarking Commercial ASR Systems on Code-Switching Speech: Arabic, Persian, and German
This paper presents a benchmark evaluating five commercial ASR systems on code-switching speech across Arabic-English, Persian-English, and German-English pairs, using a two-stage pipeline to select 300 samples per pair and assessing performance with WER and BERTScore. ElevenLabs Scribe v2 achieves the lowest overall WER (13.2%) and highest BERTScore (0.936), with public dataset available.
Multimodal Speaker Verification as a Threat to Speaker Anonymization
This paper investigates how multimodal speaker verification using audio, prosodic, and linguistic cues across multiple utterances can significantly degrade speaker anonymization, reducing equal error rate by over 15% with only five utterances.