Attackers call pretending to be your bank, delivery company, or tech support. They create urgency, claim your account is at risk, and ask you to verify information or install software. The defense is simple: slow down and verify independently.

Common vishing tactics

  • "Suspicious activity" alerts on accounts
  • Threats that your device is infected
  • Refund or chargeback scams
  • Calls from spoofed numbers
Legit companies will not demand passwords, MFA codes, or remote access tools over a call.

Safe response flow

  • End the call and wait five minutes.
  • Call the company using a number you find yourself.
  • Check your account from the official app.
  • Report the call if it was fraudulent.
Call center agent with headset
Verify using official channels, not the caller.

Protect yourself long term

Enable call filtering, use voicemail screening, and keep account recovery questions private. The less data attackers can find about you, the less convincing they sound.