What Is Vishing? Voice Phishing Explained
Vishing is phishing by phone: callers posing as banks, IT support, government or family to get codes, money or access. How it works, why it succeeds and how to protect yourself.
Vishing, short for voice phishing, is phishing by phone. Instead of a suspicious email, you get a call from someone claiming to be your bank's fraud team, tech support, the police, the tax office, your mobile network, or even a relative. A live, confident voice is often more persuasive than any email.
How a vishing call works
- Credibility: caller ID shows a real organization's number or name, which can be faked. See caller ID spoofing.
- Details: the caller knows your name, bank, and maybe the last digits of your card, from leaks or earlier phishing.
- A problem: fraud on your account, a virus, a tax debt, an arrest warrant, a family emergency.
- The ask: read out a code, confirm card details, move money, install an app, or approve a prompt.
Why vishing works
- Real-time pressure leaves no time to think.
- A calm, professional voice builds trust.
- Callers answer your doubts with prepared scripts.
- People feel rude hanging up.
Common types
- Fake bank fraud teams. See fake fraud department calls.
- Callback scams from fake invoices. See callback phishing.
- Tech support calls. See fake IT support calls.
- Automated robocalls. See robocall phishing.
- AI-cloned voices. See AI voice phishing.
The one rule: hang up and call back on a number you find yourself. Never share codes, PINs or passwords, or move money, because of a call you did not make.
Got a text asking you to call? Paste it into CyberWatch AI Scan for a free check before dialling.
For all forms of phishing, read the complete guide to phishing.
Frequently asked questions
How is vishing different from ordinary phishing?
It uses live or recorded phone calls instead of emails or texts. A real voice and conversation make it more persuasive.
What do vishers usually want?
One-time codes, card or bank details, transfers to 'safe accounts', remote access to your device, or passwords.
What is the best defence?
Hang up and call back on a number you find yourself, such as the one on your card. Genuine callers will understand.
Sources
- Phone Scams, US Federal Trade Commission
- How To Avoid Phone Scams: Don't Trust Caller ID, US Federal Trade Commission
- Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
