The system listens to the first seconds of a call and says whether a human or AI is speaking, and the company's rules decide what happens next. For now it is only for some enterprise customers, and how accurate it is, ElevenLabs does not say.
- 9 October 2026: ElevenLabs released synthetic voice detection in ElevenAgents. In the first seconds of a call it says whether a human or an AI-generated voice is speaking.
- Audio generated with ElevenLabs carries a watermark, but detection does not depend on it, because audio from other sources often has none. The announcement gives no accuracy figure.
- For now the feature is for enterprise customers supported by the Forward Deployed Engineering team, and later in October it will reach a broader group of enterprise customers. The same day ElevenLabs joined Personal Agent Protocol as a design partner.
Someone calls the company and asks to change the bank account on their profile. The voice is calm and polite. It may be the customer. It may be a personal agent running an errand. It may be a cloned voice posing as the customer. According to ElevenLabs, a growing share of the calls reaching businesses and governments are no longer people, and since 9 October the company sells a way to tell which is which.
The most honest sentence in the announcement is about the watermark. ElevenLabs marks all the audio it generates, but audio from other sources often is not marked. So the detector does not wait for the mark, it listens to the voice itself. The company that sells synthetic voices now also sells the tool that catches them, and says itself that its watermark is no help with anyone else's audio.
No number. How often the system mistakes a human for a machine and the other way round, the announcement does not say. For a feature that can stop a call, that is the first question you ask, before you switch it on.
ElevenLabs is taking two roads at once. It joins the Personal Agent Protocol working group, where the rules are being written for how an agent tells a company who it is, whom it represents and what it is allowed to do. And it promises, as such standards take shape, to add support for agents that declare themselves. Voice detection stays for the ones that will not declare.
If you take orders or data changes by phone, the rule can be written today, with or without a detector: an account or password change does not go through on a voice alone, however familiar it sounds.