Vishing, short for “voice phishing,” is a type of cyber attack in which scammers use phone calls or voice messages to trick individuals into revealing sensitive personal information, such as passwords, credit card numbers, or bank details. The attackers often pretend to be representatives from trusted organizations—like banks, government agencies, or well-known companies—to gain the victim’s trust and exploit their sense of urgency or fear.

How Does Vishing Work?

• Attackers initiate contact: The scam may begin with a direct phone call, a pre-recorded robocall, or a voicemail urging the victim to call a specific number.
• Spoofed caller IDs: Attackers frequently use technology such as Voice over IP (VoIP) to disguise their phone numbers, making it look like the call is coming from a legitimate source.
• Social engineering tactics: The caller uses psychological manipulation, such as creating a sense of urgency (e.g., “your account will be frozen unless you act now”), to pressure the victim into providing confidential information.
• Information theft: Once the victim provides the requested details, the attacker can use this information for financial fraud, identity theft, or unauthorized access to accounts.

Why Is Vishing Effective?

• Trust in phone communication: People often trust calls from official-sounding sources, especially when caller IDs are spoofed.
• Emotional manipulation: Attackers use fear, urgency, or authority to cloud judgment and push victims to act quickly.
• Volume and automation: Modern tools allow scammers to target thousands of victims efficiently using robocalls and automated systems.

Synonyms:
VoIP phishing, voice phishing