Vishing

Vishing is phishing carried out over a voice call, often using a spoofed caller ID.

How it works

Calls often impersonate a bank's fraud department, tech support, or a government agency, creating pressure to approve a transfer, read out a one-time code, or install remote-access software. Caller ID can be spoofed, so a familiar or local-looking number is not proof of who is calling.

Common warning signs

  • A pre-recorded message or a delay before a person comes on the line (a sign of automated dialing).
  • Pressure toward an urgent decision.
  • A request to read out a one-time passcode or install software.

How to protect yourself

If a call pressures you to act immediately, hang up and call the organization back using a number you already trust — not one the caller gives you.

If it already happened

If you approved a transfer or shared a code, contact your bank immediately through its official app or phone line.