What is vishing (voice phishing) targeting mobile banking customers and what number spoofing technique makes it convincing?
- A.D) Caller ID spoofing is illegal in all countries; no real-world vishing attacks using spoofed numbers have been documented.
- B.B) Vishing requires physical access to a mobile tower to modify the caller ID at the cellular network level; VoIP-based spoofing is technically impossible.
- C.C) Vishing attacks are only effective if the victim's phone has no caller ID service; all modern smartphones block spoofed numbers automatically.
- D.A) Vishing calls mobile users pretending to be bank fraud departments; attackers use VoIP caller ID spoofing to display the legitimate bank's official phone number on the victim's screen. Combined with publicly available account breach data (to reference real transaction details), the caller convinces the victim to provide OTPs, account credentials, or authorize transactions. The spoofed number appears identical to the bank's real number in the call log.