Vishers Posed as Bank Employee to Raid Help Desk

A bank reported an attempted voice-phishing attack in which callers impersonated a Melbourne employee and used that person’s staff ID to persuade the help desk to reveal internal employee details. The incident shows how criminals can combine a real employee identifier with aggressive phone tactics to collect information for a broader fraud or account-compromise attempt.

Key findings

• A bank reported callers who impersonated a Melbourne employee and used the employee’s staff ID number during calls to its help desk.
• The callers sought internal information: colleagues’ names, job titles, and corporate phone numbers.
• The calls were described as manipulative, confrontational, and aggressive, with background voices suggesting a call-centre or office setting.
• The bank reported the attempted fraud after media coverage of similar voice-phishing attacks.
• ASD advises people concerned about whether a warning call is genuine to call its hotline and quote the reference number to verify it.

Who’s being targeted

• Commonly targeted roles: Help desk and service desk staff, IT support teams, Banking and financial-services employees, Security operations and incident-reporting teams, Human resources and corporate-directory administrators.
• Affected industries: Banking and financial services, Critical infrastructure.
• Attack channels: vishing.
• Impersonated: Melbourne-based bank employee.

Awareness takeaways

• Help-desk staff should independently verify a caller’s identity before disclosing employee-directory information, even when the caller provides a valid-looking staff ID.
• Treat pressure, hostility, and aggressive insistence as reasons to pause the interaction and use an approved callback or identity-verification process.
• Report suspected voice-phishing attempts promptly so security teams can identify patterns and warn other potential targets.
• Verify unexpected cyber-security warning calls through an independently obtained official number rather than relying on the inbound caller.

Red flags to watch for

• The caller asks for internal employee-directory information that is not needed to resolve a normal support issue.
• The caller becomes manipulative, confrontational, or aggressive when challenged.
• Call-centre-like background voices are audible despite the caller claiming to be an individual employee.