What is a Vishing Scam, and How Can You Protect Yourself?

Not all cyberattacks involve fancy hacking techniques. Some scammers use old-fashioned phone calls to trick you into spilling your personal and financial information. Let’s dig into what vishing scams are and how to protect yourself from becoming a target.

What are vishing scams?

Vishing — short for voice phishing — is a type of scam when someone contacts you pretending to be from a trusted organization, like your bank, a government agency or even a tech support team.¹

Vishing scams typically happen over the phone, voicemail or voice over Internet Protocol (VoIP) calls² — a technology that lets people make phone calls over the internet instead of a traditional phone line.³ The scammer’s goal is to get you to share sensitive information, like your Social Security number, bank account details or online passwords.

Vishing relies on social engineering, a tactic scammers use to manipulate people by playing on their emotions.⁴ For example, a scammer might claim your account has been compromised or that you owe a debt and need to act immediately.

Some vishing scammers may even use caller ID spoofing to make a call seem like it’s coming from a local number or a real company you’re familiar with, which could make the scam even more convincing.⁵

What are common types of vishing scams?

While vishing scams can take different forms, they all rely on one thing: building just enough trust to get you to share information you normally wouldn’t. Below are some of the most common vishing tactics to be aware of:⁶

• Impersonating banks or credit card companies: A scammer may claim that there is suspicious activity on your account and pressure you to verify sensitive details, like your card number, PIN or online banking passcode. The caller ID might even appear with the name of your actual bank or credit union. Some scammers may even go as far as using AI to change their voice.

• Government agency threats: Callers often pretend to be from the Internal Revenue Service (IRS) or Social Security Administration. The scammer might claim that you owe back taxes or that your Social Security number has been compromised. Sometimes you might get threats of arrest, fines, or suspended benefits if you don’t provide your personal details on the spot.

• Tech support scams: You could get a phone call from someone posing as a tech support specialist from a well-known company, telling you that your computer has a virus or your account has been hacked and that they need remote access to fix the issue.

Tips to protect yourself against vishing scams

Vishing scammers rely on catching people off guard, but there are some practical ways to protect yourself. Let’s review some actions you can take to spot and avoid a vishing scam.

Hang up if something feels off

Vishing scammers are pros at catching you by surprise. If you did not expect or initiate the call — or if something feels off — trust your instincts and hang up.

Keep your information safe

Don’t give out any personal details, like your Social Security number, credit card information, or passwords, over the phone. Legitimate organizations won’t ask for sensitive information by phone, nor will they pressure you to make hasty decisions.

Don’t fall for scare tactics

Voice phishing scammers know just how to push your buttons and fill you with fear. They might say your account has been compromised, your identity has been stolen or that you’re in legal trouble if you don’t cooperate. But don't let their scare tactics get to you. Try your best to stay calm and think before responding. Scammers rely on panic to sway your judgment, so staying grounded can help protect you and your personal information.

Watch out for surprise offers

Some vishing scammers may call you claiming you’ve won a prize, a trip or money. They may then say they need personal details, so you can redeem what you’ve won. If the contest or reward they’re referring to doesn’t sound familiar, be cautious. “Free” perks usually come with strings attached, and if something sounds too good to be true, it probably is.

Always verify the caller’s identity

If you receive a call from someone claiming to be from a particular company or agency and asking for any personal information, hang up. You can contact the organization directly to verify if the call was a scam using reliable information from their official website or a recent account statement. Never use the number the caller provides.

Report suspicious calls

If you’ve been the target of a vishing scam or suspect you may have been, you can do the following:

• Contact your local police or sheriff’s office to file a report.
• File a complaint with the Federal Trade Commission (FTC).
• Reach out to your state attorney general’s office.
• Register your phone number with the National Do Not Call Registry.
• Report unwanted robocalls, including illegal and spoofed calls, to the Federal Communications Commission (FCC).⁷
• If the victim of the scam is an older adult, you can file a complaint with the Internet Crime Complaint Center (IC3) to investigate elder fraud.⁸

---

---

Stay one step ahead of vishing scams

The best way to protect yourself from scams is to stay informed, trust your instincts, and speak up. Share what you know with friends and family so they can stay protected from vishing scams too.

This article has been updated from a previous posting on September 10, 2023. Kia Jackson contributed.

Sources:

1. https://ask.fdic.gov/fdicinformationandsupportcenter/s/article/Q-What-is-vishing?language=en_US
2. https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-frauds-and-scams/spoofing-and-phishing
3. https://www.investopedia.com/terms/v/voiceoverinternet-protocol-voip.asp
4. https://www.mcafee.com/blogs/privacy-identity-protection/social-engineering-the-scammers-secret-weapon/
5. https://www.fcc.gov/consumers/guides/spoofing
6. https://www.mcafee.com/learn/what-is-vishing-and-how-to-avoid-it/
7. https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts
8. https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-frauds-and-scams/elder-fraud