Vishing
Vishing: Fraud by Phone Call
Vishing is voice phishing: a live call or voicemail that impersonates a bank, police force, or technical support to pressure you into moving money or sharing codes.
Overview
What is it
Vishing is deception carried out by voice. A caller claims to be from your bank, the police, a tax office, or a technology company and invents a problem that only they can fix. They may already know some of your details from a data leak, which makes the story convincing. The call is designed to keep you on the line and in a heightened emotional state so that you follow instructions without independent checks.
Entry point
How does it usually begin
Vishing arrives as an unexpected call, often from a number that appears local or matches a real organisation. It can also begin with a voicemail asking you to call back a number. Some campaigns send a text first to warn you that the bank will call, which makes the later call feel expected.
Psychology
The psychological play
A live voice is persuasive. The caller controls the pace, reacts to your hesitation, and uses authority and fear of loss. They may tell you not to hang up and to keep the matter secret, which prevents you from checking with anyone else.
Warning signs
What to watch for
- The caller says your money is at risk and must be moved to a safe account.
- You are told to stay on the line and not to tell anyone.
- The caller asks for a one-time code or your full password.
- The number is spoofed so it appears to be your bank's real number.
- You are asked to install remote access software.
- The caller becomes agitated when you suggest calling back.
Victim perspective
What the victim usually sees
Your phone rings and the display shows your bank's name or a familiar number. The caller knows part of your account history and warns of suspicious transactions. They guide you through what feels like a security procedure.
Anatomy
The anatomy of the deception
- 01
Contact
You receive an unexpected call from someone claiming to be your bank.
Defender move
Hang up and call the number on your card.
- 02
Trust
The caller quotes real details about you.
Defender move
Remember that a data leak can supply those details.
- 03
Pressure
You are told your money is at immediate risk.
Defender move
Treat urgency from an incoming call as a warning sign.
- 04
Request
The caller asks for a code or for remote access to your device.
Defender move
Never share a one-time code or install software on request.
- 05
Payment or Information
You are guided to move money or read out details.
Defender move
End the call and verify with the real organisation.
- 06
Consequence
Money leaves your account or your device is accessed.
Defender move
Call your bank immediately and report the call.
Verification
What to verify
- 1End the call and dial the number printed on your card or statement.
- 2Ask the organisation to confirm the issue through its app or in writing.
- 3Check whether your bank ever asks for codes by phone; most do not.
- 4Discuss the call with a trusted person before doing anything.
Protection
How to protect yourself
- Agree a family rule that no urgent money request is acted on during a call.
- Never install remote access software at the request of an unexpected caller.
- Use your bank's app to review transactions rather than trusting the caller.
- Register with call-blocking or nuisance-call services where available.
If it happened
If you already responded
Act quickly, and don't blame yourself.
- 1Hang up and call your bank from a different line or your mobile.
- 2If you shared a code, ask the bank to freeze or secure the account.
- 3If you installed software, disconnect the device and seek help removing it.
- 4Report the call to your national fraud reporting service.
Examples
Real-world examples
Common vishing stories include a fake fraud team warning of a compromised account, a fake police officer asking you to help an investigation, and a fake technical support agent claiming your device is infected.
Sources
Where this comes from
Claims are labelled by verification status. Treat reported, alleged and unresolved claims as exactly that.
- Verified factGOVERNMENT
Guidance on nuisance calls, messaging, and number misuse
UK Office of Communications (Ofcom) · 30 May 2024
View source - Verified factGOVERNMENT
Action Fraud national fraud and cybercrime reporting guidance
UK Action Fraud / City of London Police · 02 Apr 2024
View source
Spotted this pattern? Help others by reporting it.