Vishing attacks use phone calls — impersonating banks, IRS, tech support, or executives. AI-generated voice cloning makes impersonation nearly perfect even with voice samples.
Verify caller identity through official phone numbers (not numbers they give you). Banks never ask for full PINs or passwords over the phone. Out-of-band verification (call back via known good number) defeats vishing.