Voice Phishing Scams Are Getting More Clever
Summary: Krebs on Security recounts three voice phishing cases in which callers spoofed the victim's own bank or carrier number and recited personal details to win trust: MetaFilter creator Matt Haughey gave up his card PIN and later found $3,400 in fraudulent charges, and Panic Inc. founder Cabel Sasser stopped short of entering his current PIN after the caller claimed only the IVR system could see it. A Canadian reader identified as Curt was routed between a scripted voice and a live French-accented speaker when he asked the scripted voice about the weather in Barrie, Ontario, and a 30-year security veteran received an automated call playing the AT&T jingle that asked for his security PIN.
What's compelling: Spoofed caller ID plus a few purchased personal details were enough to move two technology executives to the edge of handing over their PINs, and Haughey's account was drained to $300 before he caught on.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026