You answer a call from an unknown number, and sure enough, it’s a robocall pretending to be your bank. The voice says there’s a problem with your account. What do you do? Welcome to the world of phone scams, also known as voice phishing or “vishing,” where scammers use old-fashioned phone calls to steal personal and financial info. The con is the same – scammers want credit card numbers, account logins, and other personal information to rip you off or steal your identity altogether. The most common types of caller scams typically have one thing in common — a sense of urgency. And because these attacks reach you on your most private device, your smartphone, it feels even more direct and personal.

Types of vishing phone scams

Vishing scams often involve impersonation of trusted entities, such as banks, government agencies, tech support, or even family members in distress. From Internal Revenue Service (IRS) scams and tech support fraud to financial investment schemes, each scam is designed to exploit the victim’s fear, trust, or curiosity. Read on to learn more about the types of vishing scams you should guard against.

The tax-related phone scam

A common example around tax season is the IRS scam, where scammers pose as tax agents and make threatening calls to taxpayers. They demand money for back taxes or penalties and, in some cases, further threaten victims with legal action or arrest. Of course, it’s all fake. The IRS will never call to demand immediate payment in the form of a prepaid debit card, a gift card, or a wire transfer. Also, the IRS will never demand that you pay taxes without the chance to appeal what’s owed. Instead, they’ll advise you of your rights as a taxpayer.

Tech support phone scams

Another popular example is the phony tech support scam, where the scammer will claim they represent a security provider or tech brand and say they’ve noticed a problem with your computer or device and will fix the problem for a fee. They might also ask you to download software to do a “security scan,” enabling them to install malware that steals your personal info. They might even try to sell you a worthless computer warranty or offer a phony refund.

Banking phone scams

“We have detected unusual activity on your account. Please call us back at this number to speak to a customer service representative.” This is a typical message scammers use in bank vishing activities. Whether it’s a generic message or customized with the name of a bank or credit union, the object is the same. They want you to call back so they can steal your financial info. In more sophisticated attacks, the incoming number might look similar to your bank or credit union’s, thanks to a trick called “caller ID spoofing” which fakes the origin of the call.

Voice clone phone scams

The arrival of cheap and easy-to-use AI tools brings voice clone attacks that parrot the voice of friends and family members in “urgent” need. For example, a “grandchild” calls their grandparent, saying they’re stuck in the middle of nowhere with a broken-down car, in a hospital across the country with a major injury, or in jail overseas and need to get bailed out. In every case, they need money. Fast. Sure, it’s a scam. But in the heat of the moment, it all sounds real enough for you to act right away.

How to avoid phone scams

  • If you receive a phone call from either a person or a recording requesting passwords, personal information, or money — hang up immediately.
  • Be skeptical of the caller ID — even if a call appears to be coming from a legitimate business, it might be a spoofed (fake) ID.
  • If you think your bank might be calling you, but aren’t sure, let the call go to voicemail. Call your bank back directly to confirm any potential issues, and let them know about the scam call. Banks and credit unions have employees who handle fraud cases like that.
  • When it comes to tech support, know that a trustworthy technology company like McAfee will never call you out of the blue and request money, information, or access to your devices.
  • Register your mobile phone number, as well as your home phone, on the “do not call” registry to reduce your exposure.
  • Limit your exposure further by removing your personal info from risky data broker sites with our Personal Data Cleanup service.
  • Set your social media accounts to private. Scammers sift through public social media profiles in search of information on their targets: family names, interests, vacation spots, workplaces, even videos that they can use for cloning. By making your accounts private, you deny scammers the resources they require. Our Social Privacy Manager can do this for you across all your accounts in only a few clicks.
  • Establish a unique codeword with loved ones to verify each other’s identity. Avoid using easily guessable phrases and periodically change the word for added security.