Skip to content

Glossary · Social engineering and simulation

Voice phishing (vishing)

Phishing by phone call or voicemail, often posing as IT support, a bank or an executive.

What is vishing?

Voice phishing, or vishing, is phishing carried out by phone call or voicemail. The caller poses as someone trusted, such as IT support, a bank, a vendor or an executive, and talks the target into sharing credentials, approving an MFA prompt or making a payment.

How it works

Help desk impersonation is a common pattern: the attacker calls the service desk as an employee and asks for a password or MFA reset, or calls an employee as the service desk. AI voice cloning and real-time voice tools make callers more convincing.

Vishing often follows another touch, such as an email or text that tells the target to expect a call.

Why it matters

A live conversation creates pressure that an email cannot. People who have practiced a vishing call are far better placed to pause and verify.

How Living Security helps

Living Security Voice Phishing (Vishing) runs AI phone calls that talk back, then coach, and the result scores into the Human Risk Index.

See which people and AI agentsare driving your risk.

A live walkthrough with our team, on the tools you already run.

  • 68%Less time in a risky state after targeted action (2026 Human Risk Report)
  • LeaderNamed Leader in the Forrester Wave™: Human Risk Management Solutions, Q3 2024
Book a demo