Vishing: The New Identity Theft
Electronic thieves have a new method of attack. Because Internet users are learning not to click links in unsolicited emails in order to prevent phishing attempts, these thieves are now "vishing," which is short for "voice phishing."
A vishing attack often starts as an email appearing to be from a financial institution or legitimate online merchant. The individual is instructed to call a phone number to verify account information or because his or her account information has been breached. When a victim calls the number the person asks for personal and/or financial account data. In some instances they may even provide the victim's personal information, such as a credit card number, and ask for confirmation of the number or the three-digit security code on the back.
In other cases, rather than a person, an electronic phone banking application that imitates a real financial institution's phone banking has been known to be used. This application can prompt the caller to key-enter information, which is then captured. Vishers may also impersonate the Caller ID information on a person's home phone.
It's important to be aware of this new technique thieves are using to obtain your confidential information.
What To Do If You Suspect A Vishing Attack
Suspect Email: Do not call the number provided in the email. Call the company directly at a phone number obtained from a reliable source and advise them of the content of the email.
Suspect Phone Call: Do not verbally provide or enter any information via your touch-tone phone. Hang up the phone and dial the company directly at a phone number obtained from a reliable source and advise them of the phone call. If your credit card number was provided to you for verification, call your financial institution directly and ask to have a new card number issued.
If you suspect any of your Western accounts have had a vishing attack, contact a Call Center Representative by phone at 877-254-9328, option 4, Monday through Friday from 5:00 am to 6:00 pm or send a secure email.
