Phone and Voice Scams (Vishing): How to Spot Them and What to Do

Voice phishing, or 'vishing,' relies on urgency and impersonation over a phone call to trick people into sending money or sharing sensitive information. Here is what to do if a call feels off.

  1. 1. Hang up if the call creates fear or urgency about money

    Any call claiming your bank account is compromised, you owe back taxes, a family member is in legal trouble, or you must act 'right now' is a major red flag regardless of how official it sounds. Hang up before engaging further.

  2. 2. Verify independently, using a number you look up yourself

    Call the organization or family member back using a number from their official website or your own contacts list, never a number the caller gave you or a number you were told to call back on. Scammers can make a callback number ring straight to them.

  3. 3. Never act under pressure, no matter who they claim to be

    Legitimate banks, government agencies, and law enforcement do not demand immediate payment by wire transfer, gift cards, or cash pickup over the phone, and will not threaten instant arrest for hanging up to verify. Any of those tactics is a scam.

  4. 4. Never share one-time codes, card details, or remote access

    Never read out a one-time passcode (OTP), give a full card number or PIN, or install remote-access software on a call you did not initiate — these are the tools scammers use to actually take money once trust is established.

  5. 5. Be aware of AI voice-cloning scams

    AI tools can now convincingly clone a familiar voice from just a few seconds of audio, so a call that sounds exactly like a relative in distress is no longer reliable proof of identity on its own. Agreeing on a family verification phrase in advance is a simple, effective defense.

  6. 6. If you already responded, act immediately

    If you shared information or sent money, contact your bank right away to freeze the account or attempt to reverse the transfer, then report the incident to your local police and your country's consumer protection or fraud reporting agency.

Common vishing tactics to recognize

Institutional impersonation: callers pose as police, tax authorities, or bank fraud departments claiming your identity or account has been compromised. Loan and debt scams: callers offer suspiciously easy loan approval in exchange for an upfront 'processing' or 'guarantee' fee that is never refunded. Messenger phishing: a text or social media message from a 'friend' or 'family member' asks for money or a code, often followed by a call to add pressure and legitimacy. AI deepfake voice scams: a cloned voice of a relative, claiming an accident or emergency, pressures an immediate money transfer before the target has time to think or verify.

Why these scams keep working

Vishing succeeds by combining three psychological levers at once: urgency (act now or something bad happens), authority (a scary-sounding institution or a familiar voice), and isolation (don't tell anyone, don't hang up to check). Removing any one of those three — slowing down, hanging up, or telling a second person before acting — breaks most scam attempts, which is exactly why scammers work so hard to prevent all three.

Frequently Asked Questions

Can scammers really fake the caller ID of a real bank or agency?

Yes. Caller ID spoofing lets a scammer display any name or number they choose, including one that matches a real institution's official number, so a familiar-looking caller ID is not proof that a call is legitimate.

What should I do immediately if I think I've been scammed?

Contact your bank or card issuer immediately to freeze the account and attempt to reverse any transfer, change any passwords or codes you may have shared, and report the incident to local law enforcement and your country's fraud or consumer protection agency — acting within the first hour significantly improves the odds of recovering funds.