Imagine receiving a call from someone claiming to be your bank:
“We detected suspicious activity on your account. Please confirm the verification code we just sent you.”
The caller sounds professional and may even know your name. But the call could be a vishing attack.
Vishing, or voice phishing, is a social engineering attack where criminals use phone calls or voice messages to impersonate trusted organisations and steal sensitive information.
How Vishing Works
Vishing attackers often pretend to represent banks, government agencies, delivery companies, or technical support.
Typically, they create urgency and pressure you to act quickly. They may ask for:
- Passwords or PINs
- Banking information
- One-time verification codes
- Money transfers
- Remote access to your computer
Some attackers also use caller ID spoofing, making their number appear legitimate.
Share
Common vishing scams use impersonation, urgency and fear to convince victims to reveal sensitive information.
Common Vishing Scams
Bank impersonation: A caller claims suspicious activity has occurred and asks for a verification code or money transfer.
Technical support vishing: A caller claims your computer has a virus and asks you to install software or provide remote access.
Example:
Government impersonation: A scammer threatens fines or legal consequences unless you provide information or make a payment.
Delivery scams: A caller claims there is a problem with a parcel and requests personal or payment information.
Warning Signs of Vishing
Be cautious when a caller:
- Pressures you to act immediately
- Requests passwords, PINs or verification codes
- Asks for remote access to your device
- Demands money or unusual payments
- Threatens account suspension or legal action
Most importantly, do not trust caller ID alone.
How to Protect Yourself
If a call seems suspicious, end it.
Then contact the organisation yourself using the telephone number on its official website, app, bank card or statement.
Never give an unexpected caller your password, PIN or verification code. Likewise, never install remote-access software because an unknown caller tells you to.
Vishing, Smishing and Phishing
The main difference is how criminals contact you:
Phishing → Email
Smishing → SMS/text message
Vishing → Phone or voice call
However, all three rely on social engineering to manipulate people.
Final Thoughts
Vishing works because a convincing voice and an urgent story can make a fraudulent call feel genuine.
When an unexpected caller asks for sensitive information or money, don’t allow urgency to make the decision for you.
Stop. Think. Verify.