Vishing: When a Phone Call Is a Scam
Learn how voice phishing uses urgency, impersonation, and familiar details to pressure people, and how to verify a caller without sharing sensitive information.
A convincing voice is not verification
Vishing is phishing carried out through voice calls or voice messages. A caller may claim to represent a bank, public agency, employer, or technical support team. Caller ID can be spoofed, and a familiar voice can be imitated. Treat the content of the request as more important than the name or number displayed.
Pressure is often part of the approach
A caller may describe suspicious activity, an urgent deadline, or a threatened account closure. The story is designed to keep you engaged before you verify it. Knowing your address or recent personal details does not establish authority. Pause when a call moves toward payments, verification codes, remote access, or disclosure of sensitive information.
End the call and verify independently
Tell the caller you will contact the organization yourself. Use a number from its official app, a statement, or another trusted source. Do not use a callback number supplied during the suspicious call. If there is concern that the call has not disconnected, use a different device or another verified communication channel.
Respond quickly if you shared something
If you disclosed a password or code, contact the affected provider and secure the account. If you sent money, ask your financial institution about available recovery procedures immediately. Remove remote access software if installed, using trusted technical help when needed. Save call details and messages, and report the incident through the appropriate official channel.