Glossary/Vishing

Glossary term

Vishing

Vishing is phishing by voice — a phone call (or voicemail) that impersonates a trusted organization or person to steal money, codes, or personal data.

What it is

Vishing combines voice and phishing. The caller claims to be from your bank, the IRS, tech support, a utility, or even a relative in trouble. They create urgency so you do not hang up and verify.

Today's vishing can include spoofed caller ID and, increasingly, AI voice clones that sound like someone you know. The aim is still the same: get you to move money, share codes, or install remote-access software.

How it works

  1. Contact — An unexpected call or a callback after a text/email alert.
  2. Story — Fraud on your account, unpaid taxes, a stuck package, or a family emergency.
  3. Pressure — Stay on the line, Do not tell anyone, Wire or buy gift cards now.
  4. Extraction — They ask for passwords, one-time codes, remote desktop access, or payment.
  5. Cover — Sometimes they keep you talking while another person drains accounts.
  6. AI voice clones and deepfake audio can make family-emergency scripts more convincing.

Red flags

  • Unsolicited calls about debt, refunds, or suspicious activity that demand immediate action
  • Requests to buy gift cards, crypto, or wire money to secure funds
  • Pressure not to hang up or call the official number yourself
  • Asks for one-time passcodes, remote-access software, or full SSN over the phone
  • Caller ID that looks local or official but the story feels off
  • A relative or boss who will not video-call or answer a known personal question

What to do if you’re targeted

  • **Hang up.** Call back using a number from your statement, the official website, or a saved contact — not a number the caller gave you.
  • **Never share one-time codes or install remote-access tools** for an unexpected support call.
  • **If you already paid or shared access:** contact your bank, freeze cards if needed, and change passwords on affected accounts.
  • **Document** the caller ID, time, and what was asked; report to ReportFraud.ftc.gov (U.S.) and, for IRS impersonation, IRS.gov/scams.
  • **Talk with family** about a simple verification phrase for emergency calls.
  • **Optional:** run a free identity scan if personal data may have been exposed in the process.

Related terms

Next steps

Free identity scan

Check for signs your information may be exposed — free and straightforward.

Free identity scan

Protect your identity

Dark web and social monitoring, plus identity theft insurance up to $1M (subject to policy terms).

Protect your identity