{"id":6232,"date":"2026-09-21T09:05:07","date_gmt":"2026-09-21T07:05:07","guid":{"rendered":"https:\/\/enthec.com\/?p=6232"},"modified":"2026-09-21T09:05:07","modified_gmt":"2026-09-21T07:05:07","slug":"vishing-what-it-is-how-it-works-and-how-to-protect-yourself-from-fraudulent-calls","status":"publish","type":"post","link":"https:\/\/enthec.com\/en\/vishing-what-it-is-how-it-works-and-how-to-protect-yourself-from-fraudulent-calls\/","title":{"rendered":"Vishing: What It Is, How It Works, and How to Protect Yourself from Fraudulent Calls"},"content":{"rendered":"

The phone rings; you see a number that looks like your bank’s, and you pick up without thinking twice. That’s exactly what <\/span>vishing is: a phone scam that\u00a0<\/b>uses social engineering and identity theft\u00a0<\/strong>to steal your login credentials, verification codes, or money<\/span>.<\/span><\/p>\n

The term is a portmanteau of \u201cvoice\u201d and \u201cphishing,\u201d and in recent years it has become one of the fastest-growing types of fraud in Spain.<\/span><\/p>\n

What exactly is vishing?<\/b><\/h2>\n

Vishing is a phone scam in which the attacker impersonates a trusted entity (a bank, the tax authority, a telecommunications provider, or a company\u2019s technical support) to trick the victim into revealing sensitive information or authorizing a transfer.\u00a0<\/span>No malware is involved, and there is no link to click;\u00a0the entire attack happens<\/strong><\/span>\u00a0during the conversation.<\/b><\/p>\n

According to data from INCIBE, the public cybersecurity agency handled more than 120,000 cybersecurity incidents in 2025\u2014a 26% increase from the previous year\u2014and the industry itself reports that vishing was one of the fastest-growing types of cyberattacks during that period.<\/span><\/p>\n

The Ministry of the Interior recorded 489,248 cybercrimes in 2025, of which 430,493 were computer scams. Far from being an outdated channel for fraud, the telephone has become one of scammers’ preferred methods.<\/span><\/p>\n

 <\/p>\n

How Does Vishing Work? The Anatomy of a Fraudulent Call<\/b><\/h2>\n

A vishing attack usually follows a fairly recognizable script once you’re familiar with it, even if it seems convincing at the time:<\/span><\/p>\n

    \n
  1. Caller ID spoofing.<\/b> The number you see on the screen looks real\u2014it even matches your bank\u2019s number\u2014because the attacker has forged it.<\/span><\/li>\n
  2. A sense of urgency.<\/b> They alert you to a suspicious charge, an account freeze, or a held package. The goal is to make you act out of fear rather than calmly.<\/span><\/li>\n
  3. Request for information or codes.<\/b> They ask you to \u201cconfirm\u201d your identity by providing an SMS code, your PIN, or\u00a0<\/span>saying \u201cyes\u201d out loud\u2014information that can later be used to access your accounts, just like an\u00a0infostealer<\/a> that compromised your device.<\/span><\/li>\n
  4. Quick hang-up.<\/b> Before you can verify anything through another channel, the call ends and the damage is already done.<\/span><\/li>\n<\/ol>\n

    What has changed in recent years is the<\/span> technical sophistication<\/b>. Voice cloning using artificial intelligence now makes it possible to imitate the voice of a family member or an executive with just a few seconds of audio\u2014something that sounded like science fiction a few years ago but is now a real threat to businesses and individuals alike.<\/span><\/p>\n

    You might be interested in:> <\/span>SIM Swapping: What It Is, How It Works, and How to Avoid This Scam in 2026 <\/span><\/a><\/p>\n

     <\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Examples of vishing currently circulating<\/b><\/h2>\n

    Here are some of the most common examples of vishing reported in Spain:<\/span><\/p>\n\n\n\n\n\n\n\n\n
    Call Type<\/b><\/span><\/td>\nWhat they say<\/b><\/span><\/td>\nWhat they’re looking for<\/b><\/span><\/td>\n<\/tr>\n
    Fake Bank Security Department<\/b><\/td>\n\u201cWe\u2019ve detected suspicious activity in your account\u201d<\/span><\/td>\nSMS code or online banking password<\/span><\/td>\n<\/tr>\n
    Fake technical support<\/b><\/td>\n\u201cYour computer has a virus; we need remote access\u201d<\/span><\/td>\nInstall remote control software<\/span><\/td>\n<\/tr>\n
    Fake Tax Agency<\/b><\/td>\n\u201cYou have a pending tax refund\u2014please confirm your information\u201d<\/span><\/td>\nBank and personal information<\/span><\/td>\n<\/tr>\n
    Voice-Based CEO Fraud<\/b><\/td>\n\u201cI\u2019m the CEO; I need an urgent wire transfer\u201d<\/span><\/td>\nPayment authorization from an employee<\/span><\/td>\n<\/tr>\n
    Fake telephone operator<\/b><\/td>\n\u201cWe\u2019re going to upgrade your plan\u2014please confirm the code you receive\u201d<\/span><\/td>\nFraudulent number porting<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    This last scenario is particularly dangerous because, if the scammer manages to port your number, they can intercept the verification codes from your banking apps.<\/span><\/p>\n

     <\/p>\n

    How to Spot a Vishing Attack Before It\u2019s Too Late<\/b><\/h2>\n

    There are signs that are almost always present, although sometimes it’s hard to see them in the heat of the moment:<\/span><\/p>\n