Vishing is phishing conducted through a phone call, voicemail, or another voice channel. A criminal impersonates a bank, government agency, technology company, employer, or relative to obtain information, money, a security code, or remote access. For common call scripts, warning signs, and incident response, see What is vishing?.
How vishing works
The caller creates urgency around a suspicious purchase, tax problem, compromised account, hacked computer, or family emergency. The proposed solution directs the victim to reveal a code, install remote-access software, buy gift cards, or transfer money.
Caller ID can be spoofed. A local number or familiar organization name is display information, not proof of identity. Generated or recorded voices can also imitate someone you know.
How to respond
Hang up and contact the organization through a number printed on a card, statement, or official website. Call a relative at a known number and use a family verification phrase for emergency requests.
Never transfer money to a âsafe accountâ or give a one-time code to an unexpected caller. Report phone scams at ReportFraud.ftc.gov.
Vishing and robocalls are different
A robocall is an automated call. It may be marketing, informational, illegal, or fraudulent. Vishing refers to the deceptive attempt, whether the voice is automated or human.