Vishing is another phishing technique where the attacker tries to get personal information out of the victim by calling and impersonating a credible organisation such as a bank or any other service provider. The attacker claims there’s an urgent issue that needs to be resolved immediately. This can be especially effective considering the victim will have less time to think than other phishing techniques such as smishing. Vishing is even more effective when performed using the native language of the victim as it is more familiar.
How to Spot and what to do if you were a victim of a Vishing attack:
- Where possible, verify caller by analysing country code and phone number from where the call is originating.
- Notice of a delay 2/3 seconds before a live person speaks, it may be an auto-dialler system.
- Caller will be reluctant to confirm their identity, web address and online verification details.
Never provide any information over the phone. It is important that these calls are reported to the organisation being impersonated.
This Cybersecurity Awareness Campaign is co-funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Cybersecurity Competence Centre. Neither the European Union nor the European Cybersecurity Competence Centre can be held responsible for them.