Forget who you Forgot: Speaker Unlearning to Prevent Re-Identification in Zero-Shot Text-to-Speech
On the map: LLM safety and security → Machine unlearning
also in 1 more
Abstract (arXiv)
Recent zero-shot text-to-speech (ZS-TTS) systems can reproduce a speaker's voice with high fidelity from only a few seconds of reference speech, raising concerns over unauthorized voice cloning and impersonation. Speaker identity unlearning has recently emerged as an approach to selectively suppress this capability for speakers who opt out while preserving synthesis capability for other speakers. Although existing approaches reduce speaker similarity, preventing re-identification often faces severe degradation of speech quality. Motivated by this observation, we propose GUARD, a lightweight speaker identity unlearning framework that combines a learned speaker gate with speaker-agnostic activation steering on a frozen TTS backbone. The steering vectors are optimized using group-relative reward optimization to shift outputs from forget speakers toward population-level impostor similarity while preserving intelligibility and speech naturalness. On CosyVoice2, GUARD reduces forget-speaker similarity from 0.541 to 0.103 and re-identification accuracy in a 150-speaker gallery from 73.5% to 0.5%, while preserving retain-speaker reproduction. The results demonstrate that similarity reduction alone may not fully characterize successful speaker identity unlearning and highlight re-identification as a complementary criterion for its evaluation.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 23 of its 24 references that are in the map. First posted on arXiv 23 Sep 2026.
Builds on
23 of 24 references.
Closest ancestors · 2
Same direction, newest first
- 2026Continual Speaker Identity Unlearning with Minimal Interference25 May
- 2025Do Not Mimic My Voice: Speaker Identity Unlearning for Zero-Shot Text-to-Speech27 Jul
Other references · 21
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 4,057
- 2021WavLM: Large-Scale Self-Supervised Pre-Training for Full Stack Speech Processingcited by 1,657
- 2023Neural Codec Language Models are Zero-Shot Text to Speech Synthesizerscited by 752
- 2019LibriTTS: A Corpus Derived from LibriSpeech for Text-to-Speechcited by 649
- 2022UTMOS: UTokyo-SaruLab System for VoiceMOS Challenge 2022cited by 390
- 2023Voicebox: Text-Guided Multilingual Universal Speech Generation at Scalecited by 379
- 2024F5-TTS: A Fairytaler that Fakes Fluent and Faithful Speech with Flow Matchingcited by 361
- 2024Seed-TTS: A Family of High-Quality Versatile Speech Generation Modelscited by 300
- 2024CosyVoice 2: Scalable Streaming Speech Synthesis with Large Language Modelscited by 288
- 2023NaturalSpeech 2: Latent Diffusion Models are Natural and Zero-Shot Speech and Singing Synthesizerscited by 235
- 2024FireRedTTS: A Foundation Text-To-Speech Framework for Industry-Level Generative Speech Applicationscited by 68
9 more
- 2025F5R-TTS: Improving Flow-Matching based Text-to-Speech with Group Relative Policy Optimizationcited by 24
- 2025EmoSteer-TTS: Fine-Grained and Training-Free Emotion-Controllable Text-to-Speech via Activation Steeringcited by 23
- 2024The VoicePrivacy 2022 Challenge: Progress and Perspectives in Voice Anonymisationcited by 17
- 2026The Third VoicePrivacy Challenge: Preserving Emotional Expressiveness and Linguistic Content in Voice Anonymizationcited by 8
- 2026EmoShift: Lightweight Activation Steering for Enhanced Emotion-Aware Speech Synthesiscited by 7
- 2026Erasing Your Voice Before It's Heard: Training-free Speaker Unlearning for Zero-shot Text-to-Speechcited by 4
- 2026Activation Steering for Accent-Neutralized Zero-Shot Text-To-Speechcited by 3
- 2025VoiceCloak: A Multi-Dimensional Defense Framework against Unauthorized Diffusion-based Voice Cloningcited by 1
- 2026GLASS: GRPO-Trained LoRA for Acoustic Style Steering in Zero-Shot Text-to-Speechcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Speech Generation Speaker Poisoning: Capability Erasure in Zero-Shot Text-to-Speech
- 2025Towards Lightweight and Stable Zero-shot TTS with Self-distilled Representation Disentanglement
- 2026Training a Compact, Strong, and Realistic Text-to-Speech Model
- 2026Speaker Identity in Non-Verbal Vocalizations: Conditional Distillation and Mixture of Experts Approach
- 2026Adding Voice Cloning to Text-to-Audio-Video Models with a Single Zero-Initialised Layer
- 2026Tacit-TTS: From Autoregressive Decoding to Masked Prediction for Efficient Transcript-Free Voice Cloning
- 2025Speech Unlearning
- 2026CuteTTS: Efficient and High-Quality Speech Synthesis via Autoregressive Modeling of Continuous Latents