Phish: Voice phishing (“vishing”)

Published: August 26, 2026

This is an example of voice phishing (“vishing”), where a scammer impersonates U of T IT staff over the phone to gain the recipient’s trust and persuades them to grant remote access to their computer.

In reported cases, scammers have claimed that a security or software update is required and asked recipients to initiate screen sharing so they can remotely install software. An unsolicited request for screen sharing or remote access is a significant warning sign.

Do not grant remote access, install software, or follow instructions from an unexpected caller. Instead, independently verify the request through an official U of T IT support channel.

Phone call details

Hello, this is U of T IT Support. We are currently performing a required security update on university computers. Your computer has been identified as requiring an immediate update.

Please call IT Support, 416-XXX-XXXX, as soon as possible. During the call, you will be asked to share your screen so that we can remotely install the required software update.

Failure to complete this update today may result in your network access being temporarily suspended. Thank you.

Phishing cues

Mimics a business process

The email poses as someone from the IT department, imitating a common business process of upgrading software.
Sense of urgency

The email implies that the reader’s account may be deactivated if quick action isn’t taken. This sense of urgency encourages the reader to act under pressure without thinking.
Requests for sensitive information

The email asks for personal information and login credentials, a common tactic used in phishing emails.
Threatening language

The tone of the email implies a security threat.
Lack of contact information

This email is missing contact information. Contact information is present in legitimate business emails.

Report phishing

If you receive a suspicious email, do not open attachments or click on links. Report phishing attempts to security.response@utoronto.ca.

Phish Bowl

Phish Bowl

Phish Bowl