Voice phishing — "vishing" — accounted for $1.2 billion in losses in 2025 according to the FBI. Unlike email phishing, phone scams create real-time pressure. A live person (or increasingly, an AI voice) is on the line, demanding immediate action, making threats, or creating urgency that prevents you from thinking clearly. Scam callers impersonate the IRS, Social Security Administration, banks, tech support, utility companies, and law enforcement.
This guide gives you a systematic approach to verifying any caller before trusting what they say.
Had a suspicious call? Describe what the caller said at IsThisAScam.to and get an instant analysis of whether it matches known scam scripts.
The Golden Rule: Hang Up and Call Back
This single technique defeats virtually all phone scams. If someone claims to be from your bank, the IRS, or any other organization:
- Politely say "I'll call you back to verify"
- Hang up
- Look up the organization's official phone number independently (their website, the back of your card, a previous statement)
- Call that official number and ask to be connected to the department the caller claimed to represent
A legitimate caller will understand and encourage this. A scammer will become aggressive, insist you stay on the line, or warn you that hanging up will have consequences. That reaction itself confirms the scam.
Got a suspicious phone call?
Describe what they said — we'll identify the scam pattern.
Free · No signup required · Cmd+Enter to scan
Caller ID Cannot Be Trusted
Thanks to VoIP technology, caller ID spoofing is trivial and widespread. Scammers can make your caller ID display any number or name they choose — your bank's real phone number, "IRS," "Local Police," or even your own phone number. STIR/SHAKEN protocols have improved authentication on carrier networks, but spoofed calls still get through, especially from international origins.
The caller ID display should never be your sole basis for trusting a call.
Red Flags During a Call
Threats and Intimidation
"If you do not pay the amount owed immediately, federal agents will be sent to your home for arrest." — Common IRS impersonation script
Government agencies do not threaten arrest over the phone. They send written notices. If someone threatens you on a call, it is a scam. Period.
Demands for Unusual Payment
No legitimate organization asks for payment via gift cards, cryptocurrency, wire transfers, or money orders over the phone. If a caller says "go to Walgreens and buy $500 in Google Play gift cards," that is definitive fraud.
Requests for Sensitive Information
Your bank will never ask for your full account number, PIN, password, or Social Security number over the phone — they already have this information. The IRS will not ask for your SSN via phone. If a caller asks for sensitive data, they do not already have it, meaning they are not who they claim.
Pressure to Stay on the Line
"Do not hang up." "Stay on the line while we process this." "Do not talk to anyone else about this call." Legitimate organizations do not isolate you from verification opportunities.
Remote Access Requests
"We've detected a virus on your computer. Let me help you fix it. Please download TeamViewer/AnyDesk and give me the access code." Microsoft, Apple, and your ISP do not make unsolicited calls about computer problems. This is a tech support scam.
Verifying Specific Caller Types
IRS / Tax Authority
The IRS initiates contact by mail. They never call to demand immediate payment, threaten arrest, ask for credit card numbers, or request gift cards. If you owe taxes, you will receive a letter first. Verify at irs.gov or call 1-800-829-1040.
Bank or Credit Card Company
Your bank may call about suspicious transactions, but they will never ask for your full card number, CVV, or PIN. They will verify your identity using questions only you can answer. When in doubt, hang up and call the number on the back of your card.
Tech Support
Microsoft, Apple, Google, and your ISP do not make unsolicited calls. If you called tech support and they are calling you back, verify the callback number matches the one you called.
Utility Companies
Utility companies send disconnection notices by mail. They do not call demanding same-day payment to prevent shutoff. Call the number on your utility bill to verify.
Law Enforcement
Police do not call to warn you about warrants or demand payment to avoid arrest. If you have an actual warrant, officers appear in person.
AI Voice Cloning: The New Threat
In 2025-2026, AI voice cloning emerged as a significant threat. Scammers can clone a person's voice from just a few seconds of audio (from social media, voicemail greetings, or public speaking). Victims receive calls that sound exactly like their boss, family member, or friend.
Defense: establish a verbal "safe word" with family members for emergencies. If your "daughter" calls frantic from jail needing bail money, ask for the safe word. An AI clone will not know it. For more on this, see how scammers use AI.
IsThisAScam's 6-layer analysis can evaluate call descriptions, reported numbers, and caller scripts against databases of known vishing operations. For related topics, see checking phone numbers and identifying spam texts.
Received something suspicious? Check it now for free →