Please be vigilant to vishing

Whether they claim to be from BT or HSBC, we’ve all experienced a call like this at some point. But you should be aware the latest tactics include pretending to be from the University’s finance team.

Vishing (voice phishing) is a type of cyber-attack that uses voice calls or voice messages to trick victims into providing sensitive information. This includes, but is not limited to:

• Login credentials
• Credit card numbers
• Bank details
• Security codes e.g. One-Time-Passcodes (OTPs)

Attackers employ various methods designed to put you at ease and install trust in the attacker. They often pretend to be from a trusted source, such as someone from a bank, credit card company, or HMRC. Vishing requests are usually made to sound urgent to panic their victims into acting without thinking.

Did you know? The attacker often tells you to hang up and dial the number on the back of your card to verify that the call is legitimate. But when you hang up, the attacker remains on the line so that when you redial you will go straight back through to them.

Once these scammers have obtained the sensitive information they are after, it can be used to commit financial theft, such as unauthorised purchases or withdrawals from the victim’s bank account.

Fortunately, there are a few ways you can help protect yourself against them:

• Be wary of unsolicited calls

We recommend that whenever you receive a call claiming to be from your bank or any other financial service provider, that you take their name and say you will call back. Do not take the number from the caller as this information cannot be trusted. Instead, search the company’s official website for their number and use this to return the call using a different phone to that which you received the suspicious call on. Remember, scammers can keep phone lines open after a call is disconnected.

If the call was legitimate when you call the company’s official number, you will be directed to the appropriate person, if not they will likely inform you that it was a vishing or scam call.

Visit the Student Hub's funding page on the portal >

• Don’t trust caller ID

Spoofing techniques can be used to make it appear as if the number is legitimate. Always verify a number by searching the appropriate company’s official website.

• Remember your bank’s advice

Your bank will usually send reminders to be vigilant of current fraud campaigns and scams. Your bank will never directly ask for any of the following verbally:

• PIN
• Login credentials
• Security codes

• Don’t install software or provide remote access over the phone

Never download software or provide remote access to your device when instructed to do so from an unsolicited call as this can enable an attacker to gain sensitive information.

• Be aware of premium rate numbers

Anyone asking you to make expensive phone calls to premium rate numbers are most likely conducting a scam. These numbers often start with '090'. They are usually seen related to claims of winning prizes or offers that are fake.

• Report it

If you receive a scam via any method, you can report it to Action Fraud via their website.