Non AI have been doing this for years. My father got one a few years ago claiming to be his grandson. My father did things right because he knows my nephew well enough to ask questions only he could answer. He also followed up with a phone call, to the real one.