Angvlar Security Awareness
Phone scams and vishing
Handle calls that impersonate IT, banks, suppliers or executives.
Why this matters
Caller ID can be spoofed and confident callers can sound legitimate. Sensitive actions should be verified using a known number and established support process.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Caller creates urgency
- Requests password, MFA code or remote access
- Caller ID looks familiar but context is unexpected
- Asks you to install support software
- Claims your account is under attack
- Discourages you from hanging up
What to do
- End the call politely
- Call back using an official number
- Never reveal passwords or MFA codes
- Do not install software at a caller’s request
- Report the number and scenario
- Lock or disconnect a device if remote access was granted
Frequently asked questions
Can caller ID be trusted?
No, it can be spoofed.
What should I do if a bank calls about fraud?
Hang up and call the official number.
Will IT need my password?
No.