Defending Against Vishing & Smishing

What are Vishing and Smishing?

While phishing typically refers to email scams, Vishing (Voice Phishing) and Smishing (SMS Phishing) are variations that target your mobile device.

• Vishing: Scammers call you over the phone, often using spoofed caller ID to make it look like a legitimate organisation (like your bank, the IRS, or tech support). They use high-pressure tactics to extract information or money.
• Smishing: Scammers send text messages containing malicious links or urgent requests. Because people tend to trust text messages more than emails, smishing has a dangerously high success rate.

Common Vishing Tactics

Vishers rely on social engineering—manipulating human psychology rather than hacking systems. Common scenarios include:

• The Bank Fraud Alert: "This is the fraud department at [Your Bank]. We've detected suspicious activity. Please verify your account number and PIN to stop the transfer."
• The Tech Support Scam: "This is Microsoft/Apple support. We've detected a virus on your computer. We need remote access to fix it."
• The Government Imposter: "This is the IRS. You owe back taxes. If you do not pay immediately, a warrant will be issued for your arrest."

Common Smishing Tactics

Smishing texts are designed to be short, urgent, and require immediate action:

• Fake Delivery Notifications "Your package is delayed due to unpaid customs fees. Click here to pay: [link]"
• Account Lockout Warnings "Your Netflix/Amazon account has been locked. Verify your identity here: [link]"
• The "Wrong Number" Scam (Pig Butchering) "Hi John, are we still meeting for golf?" When you reply "wrong number," they strike up a friendly conversation that eventually leads to a cryptocurrency investment scam.

How to Protect Yourself

• Don't trust Caller ID. Scammers can easily spoof numbers to make it look like a legitimate call. If in doubt, hang up and call the organisation back using a trusted number from their official website.
• Never click links in unsolicited texts. Even if it looks like it's from a company you do business with.
• Do not engage. Replying "STOP" to a spam text or pressing a number to "speak to a representative" only confirms to the scammer that your number is active.