Forget who you Forgot: Speaker Unlearning to Prevent Re-Identification in Zero-Shot Text-to-Speech
cs.SD, cs.AI
Submitted: 2026-09-23
Updated: 2026-09-23
License: http://creativecommons.org/licenses/by-nc-nd/4.0/
The gist: Recent zero-shot text-to-speech (ZS-TTS) systems can reproduce a speaker's voice with high fidelity from only a few seconds of reference speech, raising concerns over unauthorized voice cloning and
Terminology
Abstract
Recent zero-shot text-to-speech (ZS-TTS) systems can reproduce a speaker's voice with high fidelity from only a few seconds of reference speech, raising concerns over unauthorized voice cloning and impersonation. Speaker identity unlearning has recently emerged as an approach to selectively suppress this capability for speakers who opt out while preserving synthesis capability for other speakers. Although existing approaches reduce speaker similarity, preventing re-identification often faces severe degradation of speech quality. Motivated by this observation, we propose GUARD, a lightweight speaker identity unlearning framework that combines a learned speaker gate with speaker-agnostic activation steering on a frozen TTS backbone. The steering vectors are optimized using group-relative reward optimization to shift outputs from forget speakers toward population-level impostor similarity while preserving intelligibility and speech naturalness. On CosyVoice2, GUARD reduces forget-speaker similarity from 0.541 to 0.103 and re-identification accuracy in a 150-speaker gallery from 73.5% to 0.5%, while preserving retain-speaker reproduction. The results demonstrate that similarity reduction alone may not fully characterize successful speaker identity unlearning and highlight re-identification as a complementary criterion for its evaluation.
Sources
- Neural Codec Language Models are Zero-Shot Text to Speech Synthesizers
- F5-TTS: A Fairytaler that Fakes Fluent and Faithful Speech with Flow Matching
- CosyVoice 2: Scalable Streaming Speech Synthesis with Large Language Models
- Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speech
- Erasing Your Voice Before It's Heard: Training-free Speaker Unlearning for Zero-shot Text-to-Speech
- Continual Speaker Identity Unlearning with Minimal Interference
- EmoSteer-TTS: Fine-Grained and Training-Free Emotion-Controllable Text-to-Speech via Activation Steering
- Activation Steering for Accent-Neutralized Zero-Shot Text-To-Speech
- Seed-TTS: A Family of High-Quality Versatile Speech Generation Models
- F5R-TTS: Improving Flow-Matching based Text-to-Speech with Group Relative Policy Optimization
- GLASS: GRPO-Trained LoRA for Acoustic Style Steering in Zero-Shot Text-to-Speech
- Adam: A Method for Stochastic Optimization
- LibriTTS: A Corpus Derived from LibriSpeech for Text-to-Speech
- FireRedTTS: A Foundation Text-To-Speech Framework for Industry-Level Generative Speech Applications
- UTMOS: UTokyo-SaruLab System for VoiceMOS Challenge 2022
Related papers
- Few-Shot Open-Set Audio Classification via Transductive Prototype Refinement and Class Logit Enhancement
- Spectral Masking and Interpolation Attack (SMIA): A Black-box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems
- Remix the Timbre: Diffusion-Based Style Transfer Across Polyphonic Stems
- AVMeme Exam: A Multimodal Multilingual Multicultural Benchmark for LLMs' Contextual and Cultural Knowledge and Thinking
- SoundWeaver: Compositional Warm-Starting for Text-to-Audio Diffusion Serving
- WASIL: In-the-Wild Arabic Spoken Interactions with LLMs