What is Vishing?

S8-SA4-0119

Grade Level:

Class 6

AI/ML, Data Science, Research, Journalism, Law, any domain requiring critical thinking

Definition

What is it?

Vishing is a type of online fraud where someone tries to trick you into giving them your personal information over the phone. They pretend to be from a trusted company or government office to steal your money or identity.

Simple Example

Quick Example

Imagine you get a call from someone who says they are from your bank. They tell you your ATM card is blocked and ask for your card number and PIN to 'unblock' it. This is vishing because they are trying to trick you over the phone.

Worked Example

Step-by-Step

Let's see how a vishing scam might play out:
1. **Step 1: The Call.** You get a call from an unknown number. The caller says, "Hello, I am calling from your mobile network company. Your SIM card will be deactivated in 2 hours if you don't update your KYC details."
---2. **Step 2: Creating Urgency.** The caller sounds very official and urgent, saying, "To avoid deactivation, please share the OTP you just received on your phone."
---3. **Step 3: The Trap.** You might feel pressured and think your phone will stop working. You quickly tell them the OTP.
---4. **Step 4: The Theft.** The moment you share the OTP, the fraudster uses it to access your bank account or digital wallet, and transfers your money away.
---5. **Result:** Your money is stolen, and your SIM card was never going to be deactivated. You fell victim to vishing.

Why It Matters

Understanding vishing helps you protect yourself from financial fraud, just like a cybersecurity expert protects data. Journalists use this knowledge to report on scams, and law enforcement uses it to catch criminals. It's a critical thinking skill for everyone in the digital age.

Common Mistakes

MISTAKE: Believing callers who say there's an urgent problem with your bank account or Aadhaar card. | CORRECTION: Always remember that banks, government offices, or mobile companies will NEVER ask for your PIN, OTP, or full card number over the phone. If in doubt, hang up and call the official customer care number yourself.

MISTAKE: Sharing an OTP received on your phone with someone who called you. | CORRECTION: An OTP (One Time Password) is like a secret key. Never share it with anyone, especially not with someone who called you first. It's meant for you to use on a website or app.

MISTAKE: Feeling pressured by callers who threaten to block your service or impose a fine. | CORRECTION: Fraudsters use fear to make you act quickly without thinking. Stay calm. If someone threatens you, politely disconnect the call. No legitimate service provider will threaten you over the phone.

Practice Questions

Try It Yourself

QUESTION: Your grandmother gets a call from someone claiming to be from the electricity board. They say her power will be cut in 30 minutes if she doesn't pay an urgent bill by sharing her debit card details. What should she do? | ANSWER: She should immediately disconnect the call. The electricity board will not ask for debit card details over the phone for urgent payments.

QUESTION: Your friend receives an SMS with an OTP and then gets a call asking for that OTP to 'confirm' a lucky draw prize. Why is this a vishing attempt? | ANSWER: It's a vishing attempt because the caller is trying to trick your friend into sharing a secret OTP over the phone, likely to gain access to their accounts, using the lure of a 'prize'.

QUESTION: You get a call from a number that looks like your bank's customer care number. The person says there's a suspicious transaction on your account and asks you to install a specific app to 'secure' your phone. What two actions should you take immediately? | ANSWER: 1. Disconnect the call immediately. 2. Do NOT install any app suggested by an unknown caller. Then, if concerned, call your bank's official customer care number (found on their website or your bank passbook) to verify.

MCQ

Quick Quiz

What is the primary goal of a vishing scammer?

To help you update your personal details

To inform you about new bank policies

To trick you into revealing personal information or money over the phone

To conduct a survey about customer satisfaction

The Correct Answer Is:

The primary goal of vishing is to deceive you into giving up sensitive information like bank details or OTPs, or to transfer money, by pretending to be a trustworthy source over a phone call. Options A, B, and D are not the main intent of a scammer.

Real World Connection

In the Real World

In India, vishing scams are very common, especially targeting people with calls pretending to be from banks, mobile operators, or even government schemes like PM-KISAN. Fraudsters often use fake caller IDs to make their number look legitimate. Many people have lost money from their UPI accounts or bank accounts by falling for these calls.

Key Vocabulary

Key Terms

VISHING: Phone fraud to steal information | OTP: One Time Password, a secret code | FRAUDSTER: A person who tricks others for money | KYC: Know Your Customer, documents to verify identity | URGENCY: Making someone feel they need to act quickly

What's Next

What to Learn Next

Now that you understand vishing, learn about 'Phishing'. Phishing is similar but happens through emails or messages, not calls. Understanding both will make you super smart about staying safe online!