Avoid Phone Scams and Vishing (Voice Phishing)

What do you do when you get an unexpected text or phone call? If you automatically respond whether you recognize the number or not, you aren't alone. That said, the person on the other end could be a scammer looking to trick you into giving out personal information.

Scammers often impersonate your financial institution by sending a text detailing a fraudulent transaction. They’ll then call or send you to a fake website with the goal to steal credentials and one-time passcodes to commit the actual fraud.

So, don’t be fooled by what you see on the caller ID. Many scammers are able to make it look like a call is coming from Navy Federal, a government agency or other well-known companies like Amazon, Google or Apple. It’s a practice called “vishing.”

What Is Vishing?

Vishing (or voice phishing) involves scammers calling you on your phone and phishing (fishing) for information. It has become so widespread that experts are calling it an epidemic—and for good reason. Vishing scams are three times more likely to succeed than phishing scams, making them highly lucrative for bad actors looking for a quick con. People are more likely to trust someone on the phone, as opposed to an email they can easily ignore.

How Does Vishing Work?

It’s a new twist on an old trick, but now it’s coming to your cell phone. Vishers impersonate bank, credit card company or government officials, say they represent a charity or call you with too-good-to-be-true offers. They’ll pressure you to act right away to avoid punishment, because the need is urgent or so you don’t miss out.

To confuse you even further, some scammers spoof phone numbers from your area code and may have a number similar to your own. Some even fake Caller ID profiles so you think taking their call is safe. If you don’t answer, they may leave messages calculated to get you to call them back. Messages like “Your account has been compromised. Call us to reset your password.” have been very successful.

It’s all to catch you off guard and get you to share your personal information like bank or credit card information and details like your birthdate or Social Security Number. Their goal? They want to steal your identity, money or both. That’s why knowing how to spot and report a financial scam and how to protect yourself and your personal information is so important.

Signs It’s a Scam

It’s time to change the way we treat an incoming cell call. Many vishing calls follow a similar pattern—getting you to agree to the caller’s “terms” on the spot. Callers don't want you to think too hard about what they’re asking, so they create a sense of urgency to try to convince you to act immediately. The Federal Trade Commission (FTC) and others have identified several common red flags:

• I’m calling from [your bank/credit union]. You may be a victim of fraud, and for your account security, I need you to give me the 6-digit passcode we just texted to you.
  So, for example, a caller posing as someone from Navy Federal would say, “Hi, I’m calling from Navy Federal. We’ve seen suspicious activity and you may be a victim of fraud. I need you to give me the 6-digit passcode we just texted to you.”
• We need you to download an app so we can troubleshoot (often if impersonating Amazon/Apple/Google).
• We just want to verify our information (most often claiming to be your insurance company).
• There’s a lawsuit against you/warrant for your arrest for tax evasion.
• You just need to pay shipping and handling (or a small fee) to receive your prize.

If you get a call like this, the best defense is to hang up. Then, report the call to the FTC.
 

Protect Yourself

Here are some easy steps that you can take to protect yourself:

• Don’t let yourself be pressured into giving information over the phone. Keep personal information and passcodes private, and never give it out during an unsolicited phone call.
• Don’t download any “troubleshooting” apps, because they’ll allow the fraudster to take over your device.
• Don’t answer a call from a number you don’t recognize. You can always let them leave a voicemail and call back if it’s legitimate. If you think a call might really be from your bank, insurance or credit card company, find their phone number on your statement or card and call that number.
• Educate yourself about common scam practices. For example, the IRS will never ask for payments over the phone. They generally try to reach out through the mail before they call. They also won’t ask for payment in cash, gift cards, or wire transfers, or ask for your debit/credit card information.
• Some phone providers and many smartphones have call-blocking tools that will allow you to block calls from undesirable numbers. If you get a scam call, block the number.

At Navy Federal, we’re partners in security. If you’d like to learn more about how we protect you and easy steps you can take to protect yourself, visit our Security Center. And, if you ever suspect you’re a victim of fraud or identity theft, you can call us 24/7 at 888-842-6328.