What it is
Vishing is phone fraud. With AI the attacker can clone a voice from a few seconds of public audio (a social video, a voice note) and pose as a relative in trouble, an executive or a bank operator.
How it works
- 1The attacker collects public audio and information about the person to imitate.
- 2They call, sometimes with a spoofed number, and create urgency: an accident, a payment to make now, an account to “secure”.
- 3They ask for a transfer, a code received by SMS or account details.
- 4They insist you do not talk to anyone else.
How to spot it
- Urgency and a demand for secrecy
- They ask for codes received by SMS or to move money to a “safe” account
- The voice is right but the context is not: unknown number, unusual request
- The number on screen looks right (it is no proof: it can be spoofed)
How to defend
- Agree a code word with family and colleagues for sensitive requests
- Hang up and call back the saved or official number
- No bank asks for codes or to move money: if it happens, it is a scam
- In companies: double approval for payments and verification on a second channel
- Avoid leaving unnecessary audio and video public
If you think you have been hit
- Call the bank at once: if the payment just left it may be possible to stop it
- Change the passwords and codes you talked about
- Report to the police and keep numbers and messages
And there are many, many more
The attacks above are only some of the most common: there are hundreds, and new ones appear every week. If the one that concerns you is not among them, write to me: I will tell you whether it really affects you and how to defend.
Contact meOther attacks
Watch the Shorts on YouTubeMatteo Russo · Updated October 2026