Defending Against Vishing & Smishing

What are Vishing and Smishing?

While phishing typically refers to email scams, Vishing (Voice Phishing) and Smishing (SMS Phishing) are variations that target your mobile device.

• Vishing: Scammers call you over the phone, often using spoofed caller ID to make it look like a legitimate organization (like your bank, the IRS, or tech support). They use high-pressure tactics to extract information or money.
• Smishing: Scammers send text messages containing malicious links or urgent requests. Because people tend to trust text messages more than emails, smishing has a dangerously high success rate.

Common Vishing Tactics

Vishers rely on social engineering—manipulating human psychology rather than hacking systems. Common scenarios include:

• The Bank Fraud Alert: "This is the fraud department at [Your Bank]. We've detected suspicious activity. Please verify your account number and PIN to stop the transfer."
• The Tech Support Scam: "This is Microsoft/Apple support. We've detected a virus on your computer. We need remote access to fix it."
• The Government Imposter: "This is the IRS. You owe back taxes. If you do not pay immediately, a warrant will be issued for your arrest."

Common Smishing Tactics

Smishing texts are designed to be short, urgent, and require immediate action:

How to Protect Yourself

• Don't trust Caller ID. Scammers can easily spoof numbers to make it look like a legitimate call. If in doubt, hang up and call the organization back using a trusted number from their official website.
• Never click links in unsolicited texts. Even if it looks like it's from a company you do business with.
• Do not engage. Replying "STOP" to a spam text or pressing a number to "speak to a representative" only confirms to the scammer that your number is active.