Vishing - Phone Social Engineering

Authorized phone-based pretexting that tests help desk, finance and front-line verification procedures.

All services

// Overview

What this service is.

Vishing, or voice phishing, tests how your people and procedures respond to a convincing caller. Authorized operators use realistic pretexts against teams such as the help desk, finance and reception.

The result shows where verification steps are weak or skipped, and how to fix them.

// Scope

Scope and coverage.

  • Help desk identity verification and password reset procedures
  • Finance and payment-change verification
  • Information disclosure over the phone
  • Escalation and reporting of suspicious calls
  • Controls such as call-back and approval steps
// Deliverables

What you get.

  • Aggregated results and process gaps
  • Recommendations for verification procedures
  • Executive and technical reporting
  • A leadership debrief
  • Optional follow-up training
// Questions

Frequently asked questions.

Is this recorded?

We agree recording and data handling in advance.

Which teams are tested?

You choose, usually the help desk, finance and reception.

Can it pair with phishing testing?

Yes. Combined campaigns reflect how real attackers work.

// Get started

Ready to scope this engagement?

Tell us what you want to learn and we will help you scope the right engagement.