Vishing: When a Phone Call Is Really a Scam

by Bob Cohen

Most people have heard of email scams (phishing) and text scams (smishing).

Now there's another version that feels even more personal — and sometimes more frightening.

It's called vishing, short for voice phishing.

Vishing happens when a scammer calls you — or tricks you into calling a fake number — and tries to get your personal or financial information, passwords, or money.

• The call may sound official.
• It may sound urgent.
• It may even sound friendly and helpful.
• That's exactly the point.

How a Vishing Call Usually Unfolds

Vishing calls often follow a predictable script.

First, the caller pretends to be someone you trust. They may claim to represent your bank, your credit card company, a tech support department, or a government agency such as the Internal Revenue Service or the Social Security Administration.

Then they create urgency.

You might hear:

• “Your account has been locked.”
• “There's suspicious activity on your card.”
• “You owe money and must act today.”
• “Your computer has a virus.”
• “Your Social Security benefits are being suspended.”

Finally, they ask for something sensitive:

• Social Security numbers
• Bank or credit card numbers
• One-time passcodes sent to your phone
• Payment through gift cards, wire transfers, or cryptocurrency

The real goal is simple: to get you to act before you have time to think.

Why Vishing Works So Well

Phone calls feel personal. A real voice creates emotion.

• A human voice can sound calm and convincing.
• Caller ID can be faked (this is called “spoofing”).
• Many of us grew up trusting phone calls more than emails.
• Scammers are trained to sound confident and helpful.

Some scammers even stay on the phone with you while you drive to the bank or store. That is a huge red flag. They do this so you don't have time to think, talk to someone else, or reconsider.

The New Twist: AI Voice Cloning

Here's where things are becoming more concerning.

Scammers are now using AI voice cloning technology.

With only a few seconds of recorded audio — sometimes taken from social media videos — artificial intelligence can create a realistic copy of someone's voice.

That means a scammer might call, and you hear:

“Grandma, it's me. I'm in trouble. I need money right now.”

It may sound exactly like your grandson, or your daughter, or a close friend.

This is often called the “family emergency” or “grandparent scam,” but now it may include AI-generated voices that sound frighteningly real.

What should you do?

• Pause.
• Hang up.
• Call the person directly using a number you already have saved.
• Consider having a simple “family code word” known only within your family for emergencies. If the caller does not know the code word, you know it's not your relative.

Remember: urgency is the scammer's weapon.

Common Vishing Scenarios

Here are the most common types of voice scams today:

Bank fraud alerts

“We detected suspicious charges — verify your account.”

Government threats

Claims of unpaid taxes, suspended benefits, or arrest warrants.

Tech support scams

Someone claims your computer is infected and asks for remote access.

Family emergency scams (now sometimes using AI voice cloning)

A loved one is supposedly in jail, in an accident, or stranded.

Medicare or insurance scams

Requests to “confirm” your Medicare number or coverage details.

Four Simple Rules That Keep You Safe

If you remember nothing else, remember these:

1. Legitimate organizations do not call asking for passwords or one-time codes.

2. Government agencies do not threaten arrest or demand immediate payment over the phone.

3. No real company asks for payment in gift cards.

4. Urgency is almost always manipulation.

When in doubt, hang up. A real organization will never punish you for being cautious.

Scammers do not win because people are foolish. They win because they create fear and urgency.

What To Do If You Receive a Suspicious Call

• Do not give any information — not even your ZIP code.
• Hang up immediately.
• Call the organization directly at the number on your card or on its official website.
• Tell someone you trust. Scammers succeed when people feel embarrassed and stay silent.

If you suspect fraud, report it to the Federal Trade Commission at reportfraud.ftc.gov.

Frequently Asked Questions (FAQ)

What's the difference between phishing, smishing, and vishing?

• Phishing uses email.
• Smishing uses text messages (SMS).
• Vishing uses phone calls.

They all aim to steal information or money.

Can caller ID be trusted?

No. Scammers can “spoof” the caller ID so it appears a real bank, business, or government agency is calling.

What if the caller already knows some of my information?

That can happen. Personal data may come from data breaches or public records. Social media is often used to gather names of work associates, family members, and close friends, so the scam sounds more believable.

Knowing some of your information does not make the call legitimate.

Should I press numbers or say “yes” during these calls?

It's best not to. Some scammers record responses or route you to more aggressive scam operators.

What if I already gave information or sent money?

Act quickly:

• Call your bank or credit card company immediately.

• Change passwords.

• Consider placing a fraud alert or credit freeze.

• Report the scam to the Federal Trade Commission.

The faster you act, the better.

Is it okay to let unknown calls go to voicemail?

Absolutely. Letting unknown calls go to voicemail is one of the easiest ways to avoid vishing scams. Any legitimate caller will leave a message.

Many people now do not answer unknown numbers — and that may be one of the smartest habits you can adopt.

FREE MEMBERSHIP NOW AVAILABLE

Join my new Tech Explorer Community for weekly Tech Topics, AI Topics, Q&A, and more.