Vishing (voice phishing) is a type of social engineering attack which uses voice technology. Unlike other phishing attacks, such as email phishing and SMiShing that use emails and text messages respectively, vishing is a call-based attack. It tricks potential victims into revealing their sensitive and financial information such as account numbers, PIN, passwords, and more by impersonating a call from an authorized bank or a legitimate organization.

Under vishing, threat actors use fake caller ID in order to appear legitimate (such as your bank or your office) where they aim to encourage victims to divulge sensitive information, such as credit/debit card details, personal information, username & password, OTP (One Time Passwords), and bank account details or to install malicious software in your PC to monitor your online activities and steal data. As many services use automated callers (also known as robocall or bot caller) to lessen the burden on customer relations, this technology can also, for worse, be used as part of a voice phishing scam.