Definition
A portmanteau of "voice" and "phishing," vishing is a phone scam that manipulates human psychology to steal personal information and financial assets. Commonly referred to as voice phishing, it replaces deceptive emails with real-time phone calls. In South Korea, it is legally defined under the Special Act on the Prevention of Loss Caused by Telecommunications-based Financial Fraud alongside text and internet scams.
Why Do People Fall for It Even When They Know Better?
When a stranger on the line urgently declares, "This is the Prosecutor's Office," or "Suspicious charges were detected on your account," anyone's heart skips a beat. Scammers deliberately prey on the fact that panic and fear cloud rational thinking.
Instead of hacking into computer networks, attackers exploit human emotions such as anxiety, curiosity, or obedience to authority—a technique known as a social engineering attack. Vishing is uniquely dangerous because live, real-time voice conversations trigger immediate, knee-jerk reactions.
Attackers also use caller ID spoofing to display the official numbers of legitimate government agencies or banks on your screen. Duped by an authentic-looking caller ID and authoritative professional jargon, victims watch their walls of suspicion crumble.
A Closer Look: Evolving with Advanced Technology
Early telephone scams relied on broken accents or clumsy intimidation, but modern vishing harnesses sophisticated network technology. By routing calls through Voice over Internet Protocol (VoIP), scammers operate overseas while disguising their numbers as local landlines or mobile phones.
An even more insidious method tricks victims into installing malicious software under the guise of "security diagnostics" or "loan application reviews." Once installed on a smartphone, this malware intercepts outgoing calls: even if a suspicious victim dials the real police or financial regulator, the call is automatically rerouted to the scam syndicate.
Scammers have also begun exploiting AI deepfake voice technology, synthesizing realistic voices using audio samples just seconds long. That panicked plea from a family member on the other end of the line might be nothing more than an algorithmically generated counterfeit.
How Can You Spot and Stop It?
The single most reliable shield against vishing is simple: hang up and verify. No public institution or bank will ever call you out of the blue demanding that you transfer money, hand over passwords, or read back one-time passwords (OTPs).
If you receive a frantic call claiming to be a friend or family member begging for urgent money transfers or gift cards, hang up immediately. Call them back on their known, saved number to confirm the story. Never click web links or download apps and files from unverified sources directed over a phone call.
If you have already shared financial details or sent funds, contact law enforcement or your financial institution immediately to request an emergency account freeze. Whenever a caller pressures you for passwords, verification codes, wire transfers, or app downloads, treat it as an outright fraud: hang up and verify directly through an official channel.
Common misconceptions
Vishing relies on broken speech and clumsy lies, so tech-savvy younger people will never fall for it.
Modern vishing uses malware-driven call hijacking and AI voice cloning, making it sophisticated enough to deceive even digitally fluent younger generations.
Where you meet it
Calls impersonating law enforcement claiming your bank account is tied to a crime and ordering you to transfer funds to a "safe holding account"
Calls mimicking a child's voice claiming they have been kidnapped or lost their phone and desperately need money sent right away
In one sentence
Vishing is a phone scam that manipulates human psychology to steal sensitive personal data and financial assets.