Vishing is voice phishing in which a caller impersonates a bank, a vendor, or support and pressures someone to share secrets or act.
A live voice often wins more compliance than a written message, especially when the caller number looks familiar.
How it works
The script uses urgency, fear of a closed account, or a pretend technical emergency.
The caller may also forge the number shown on the phone.
Control returns when you end the call and dial a number you looked up yourself.
Reading a one time code to any caller hands over the second factor.
Concrete examples
- A caller claims to be the tax office and demands immediate payment.
- A pretend help desk asks a worker to read a one time code from an app.
- A bank impersonator tells the victim to move money into a so called safe account.
Protective measures
- Hang up and call the organization back on a number from your own records.
- Never read a one time code or a password to someone who called you.
- Train reception and finance staff specifically on voice lures.
- Report caller patterns to the security team so others hear the warning the same day.