New Security Scam - Vishing

According to USTelecoms Crossroads Express July 17, 2006 issue, A new telephony-based version of "phishing" dubbed "vishing" has evolved from traditional Web-based phishing scams. The new technique has been used by criminals to collect details from credit cards, including the three-digit CVV security code, expiration date and account number. "Vishing" scams usually begin when the criminal gets a cheap and easily available VoIP number and then configures an automated dialing system to call people. When the call is answered, an automated recording alerts the person that his or her credit card has been compromised and the consumer should call a phone number immediately to correct the problem. The phone number is often a toll-free number with a spoofed caller ID of a legitimate financial company.

A computer-generated voice then instructs listeners to enter their 16-digit credit card number, expiration dates and verification codes. Once this information is entered, the "visher" has the information necessary to place fraudulent charges on the consumer's card. Never call a telephone number provided in a phone call or an e-mail regarding possible security issues with a credit card or bank account. Only the phone number on the back of a credit card or bank statement is a valid number to discuss credit card account information.

Take note of the telephone number and call your credit card company directly, then if it was a scam, call your State's attorney or Attorney General and report this call.

As with phishing where they send you an email with a link that looks like the bank, credit card company, eBay or Paypal, never use a link in an email to login to these sites. Go to them directly. If you need to contact a credit card company by phone, use the phone number on your billing statement or the back of your credit card.