A customer of a large company receives a phone call from someone claiming to work for the company and asking for the customer's credit card information. The customer sees the caller ID is the same…

The correct answer is D. Vishing. Vishing (Voice Phishing) is the correct answer because the attack uses a phone call - "vishing" combines "voice" + "phishing" - and the spoofed caller ID is a classic vishing technique to impersonate a legitimate organization and steal sensitive information like credit card…

Submitted by tyler.j· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A customer of a large company receives a phone call from someone claiming to work for the company and asking for the customer's credit card information. The customer sees the caller ID is the same as the company's main phone number. Which of the following attacks is the customer most likely a target of?

Options

APhishing
BWhaling
CSmishing
DVishing

How the community answered

(56 responses)

A
4% (2)
B
2% (1)
C
2% (1)
D
93% (52)

Explanation

Vishing (Voice Phishing) is the correct answer because the attack uses a phone call - "vishing" combines "voice" + "phishing" - and the spoofed caller ID is a classic vishing technique to impersonate a legitimate organization and steal sensitive information like credit card numbers.

Why the distractors are wrong:

A. Phishing refers specifically to deceptive emails, not phone calls.
B. Whaling is a targeted phishing attack aimed at high-value individuals (executives, C-suite), not general customers.
C. Smishing uses SMS/text messages to deceive victims - "smishing" = SMS + phishing.

Memory tip: Match the delivery channel to the attack name - Phishing = email, Smishing = SMS, Vishing = Voice. If it's a phone call trying to steal data, it's vishing - the "V" stands for voice.

Topics

#Social engineering#Vishing#Caller ID spoofing#Threats

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice