������

Vishing is a phone-based phishing scam aimed at stealing your personal and financial information or gaining access to your devices. Unlike smishing, vishing is done through a phone call where you can hear the scammer's voice, hence the “v” in vishing.

The scammer has two advantages when using a phone to send scams. First, there are fewer security technologies that can detect and stop a phone call attack. Also, voice calls make it much easier for criminals to convey emotion and build trust than by using text.

(Click to enlarge)

Spotting and Stopping Vishing Attacks

The cyber-criminal will often create a sense of urgency to convince you to divulge sensitive information. Keep in mind that cyber-criminals may also use caller ID spoofing, which is a technology to display a false name or number on your phone when they call. They may leave a recorded message in your voicemail or contact you through text and leave you a number that you use to call them back.

During the scam, attackers will use social engineering techniques—like saying you’ve won a prize or there’s a suspicious activity detected in your account—to catch you off-guard and persuade you to disclose sensitive or personal information.

Some of the most common examples include:

• The caller pretends they are from the government and informs you that you have unpaid taxes. If you don’t pay your taxes right away, you will go to jail. The scammer pressure you to pay your “taxes” with your credit card over the phone. This is a scam. The government will send official tax notifications only by regular mail.
   
• The caller pretends to be from a company such as Amazon, Apple, or Microsoft and explains that your computer is infected. They will then pressure you into installing software that gives them remote access to your computer.
   
• An automated voicemail informs you that your bank account or credit card has been canceled, and you have to call a number back to reactivate it. When you call, you get an automated system that asks you to confirm your identity by providing personal information. The scammers are now recording all your information to use it in a case of identity fraud in the future.

How Can I Protect Myself from Vishing Attacks?

The greatest defense you have against a vishing attack is yourself. Scams and attacks over the phone are on the rise. You are the best line of defense when it comes to detecting and stopping them.

There are many ways to report smishing attempts, though they depend on which device, app, and service provider you are using. Please visit our Report Phishing page for more information.