How to spot a phone scam (vishing)

Why phone scams work

A live voice feels more trustworthy than an email, and callers can improvise around your questions. They also spoof caller ID, so the number really can look like your bank. Caller ID is not proof of who's calling.

The four scripts you'll hear most

“This is your bank's fraud department”

They claim there's a suspicious charge and need to “verify” you — then ask for a one-time code, your full card number, or to “move money to a safe account.” Banks never do this.

“This is the IRS / tax office”

Threats of arrest or fines unless you pay immediately, often by gift card or wire. Government agencies contact you by mail and never demand gift cards.

“We detected a virus on your computer”

Fake “tech support” wants remote access or a payment to fix a problem that doesn't exist. Hang up — real companies don't cold-call about your device.

“Your account/package has a problem”

A delivery or account issue that conveniently requires a small payment or your login. When in doubt, check the account directly.

The tells

• Urgency and secrecy — “stay on the line,” “don't tell anyone.”
• Unusual payment — gift cards, crypto, wire transfers, or “a safe account.”
• They ask for a code you just received by text. Never read it aloud.
• They discourage you from calling back the official number.

What to do

• Hang up. You're never rude for protecting yourself.
• Call back on the official number from the back of your card or the company's real website — not a number the caller gives you.
• Never share one-time codes, PINs, or passwords over the phone. Ever.
• Take a breath. Pressure is the scam. A real institution will wait.