How do I protect myself from phone call scams (vishing)?
Short answer
Hang up on any unexpected caller who asks for passwords, one-time codes, remote access to your computer or an urgent payment, then call the organization back on a number you look up yourself. Caller ID can be faked, so a familiar name on screen proves nothing.
The details
Banks, tax authorities and technology companies do not ask you to read out a one-time code, buy gift cards or install remote-control software during an unsolicited call. Scammers use these requests because they bypass your bank’s and your account’s security checks.
Agree a simple verification habit with family members, such as calling back on a saved number, so a voice that sounds familiar cannot rush you into sending money.
What to do
- Never share one-time codes or passwords over the phone.
- Hang up and call back using an official number.
- Refuse any request to install remote-access software.
- Report the number to your phone carrier and fraud reporting service.
Terms explained
- Social engineering
- Social engineering is the manipulation of people, rather than technology, to gain access, information or money.
- Vishing
- Vishing is voice phishing: scam phone calls or voicemails that impersonate banks, government agencies, IT support or family members to steal money, codes or access.
Sources
Related questions
Related Guides
GuidePersonal Security
Binance Hacked: $6.3 Billion Stolen — What Happened and How to Protect Your Crypto
Binance suffered a massive cryptocurrency theft on October 29, 2026. Here's what we know about the breach, what remains unclear, and how to protect your crypto from hackers and increasingly convincing scams.
Read more GuidePersonal Security
10 Ways to Keep Your Funds Safe on a Crypto Exchange After the Binance Hack Reports
Binance is investigating a suspected hot wallet hack. Here are 10 practical steps to protect crypto held on any exchange: account security, withdrawal limits, self-custody and scam awareness.
Read more GuideWeb Security
How to Protect Your Projects From Malicious npm Packages (and What GitHub's New Package Firewall Does)
GitHub launched a package firewall that blocks risky npm packages before they install. Learn how it works, who can use it and 10 steps any team can take today.
Read more GuidePersonal Security
How to Tell If a QR Code Is a Scam: Step-by-Step Inspection
Learn how to tell if a qr code is a scam before scanning. Check physical tamper signs, preview URLs, and protect your accounts from fraudulent redirects.
Read more