[oldtownroad]

> …we believe they have corroborating evidence through audio that suggests a deepfake is likely…

Does that mean they have audio of the call?

[ianhawes]

Most attacks like this use stolen credentials for VOIP providers, i.e. Twilio. It's likely the FBI quickly obtained a subpoena which produced a recording. The attacker may not have known the call was being recorded.