What is Vishing?

Also known as: voice phishing, phone scam

Vishing is phishing over a phone call. The caller poses as the bank, IT support, the police or a manager and, during the call, asks for a password, a one-time code, a transfer or the installation of remote access software.

Caller ID spoofing lets a scammer display a familiar number, so recognising the number proves nothing. AI-generated voices are increasingly used too.

How to spot it

  • Pressure: "you have to do this now"
  • A request for a code, password or remote access
  • A call you were not expecting

What to do

  • Hang up and call the organisation back on its official number
  • Never read out a one-time code over the phone

Related courses

Terms on this topic

More topics

← Cybersecurity glossary

Start with your team's risk baseline

15-30 employees, one phishing simulation and a one-page report for management. No annual commitment.