How to Identify and Avoid Vishing/Social Engineering Threats

Vishing is a type of social engineering attack that uses phone calls to trick victims into revealing personal information or making payments. Social engineering attacks can also be carried out through email, text messages, or in-person interactions.

In a vishing attack, the caller will often pose as a representative from a legitimate company, such as a bank or credit card company. They may claim that there is a problem with your account and that you need to provide them with your personal information or make a payment immediately.

Social engineering attackers are skilled at manipulating people and creating a sense of urgency. They may use scare tactics, such as telling you that your account has been compromised or that you are in danger of being arrested. They may also offer you a prize or other incentive to get you to act quickly.

If you receive a phone call from someone claiming to be from a legitimate company, it is important to be suspicious. Here are some tips for identifying and avoiding vishing attacks:

• Do not provide personal information over the phone. This includes your Social Security number, credit card number, or bank account number.
• Beware of callers who ask you to make a payment immediately. Legitimate companies will not ask you to do this over the phone.
• Hang up if you feel uncomfortable or suspicious. You can always call the company back using the number on their website or in your account statement.
• Report vishing attacks to the Federal Trade Commission (FTC). You can do this online at ftc.gov/complaint.

Here are some recent vishing/social engineering incidents that have been reported in Indian news:

• In January 2023, a vishing attack targeted Indian Airtel customers. The caller posed as an Airtel representative and asked the victim to provide their personal information. The victim complied, and the caller then used the information to steal the victim's money.
• In February 2023, a vishing attack targeted Indian SBI bank customers. The caller posed as an SBI representative and asked the victim to provide their personal information. The victim complied, and the caller then used the information to steal the victim's money.
• In March 2023, a vishing attack targeted Indian Paytm wallet users. The caller posed as a Paytm representative and asked the victim to provide their personal information. The victim complied, and the caller then used the information to steal the victim's money.

These are just a few examples of the many vishing/social engineering attacks that have been reported in India in recent years. It is important to be aware of the threat of vishing/social engineering attacks and to take steps to protect yourself. By following the tips above, you can help to keep your personal information safe from these types of attacks.

In addition to the tips above, you can also take the following steps to help protect yourself from vishing/social engineering attacks:

• Use a strong password manager to create and store strong passwords for all of your online accounts.
• Be suspicious of any email or text message that asks you to provide personal information. If you are not sure whether an email or text message is legitimate, do not click on any links or open any attachments. Instead, contact the company it claims to be from directly.
• Educate yourself about vishing/social engineering attacks. The more you know about these types of attacks, the better equipped you will be to spot them and avoid them.

By following these tips, you can help to protect yourself and your personal information from vishing/social engineering attacks.