Last updated: 7 November 2026
Vishing is phishing by phone call, quishing is phishing through a QR code, and deepfakes use AI-cloned voices or video to impersonate someone you trust. Defend against all three the same way: verify any payment or password request through a second, known channel, use approval rules for money, and train staff to pause.
Three scams, one defence
| Scam | How it works | Red flag | Defence |
|---|---|---|---|
| Vishing | A caller poses as the bank, IT or a supplier and pressures you | Urgency, request for codes or remote access | Hang up and call back on a known number |
| Quishing | A QR code on a poster, parcel or email leads to a fake login | Unexpected QR code asking you to sign in | Check the web address; type it yourself |
| Deepfake voice or video | AI clones a boss or supplier on a call or message | Unusual payment request, secrecy | Verify on a second channel; two-person approval |
A widely reported 2024 case saw an engineering firm lose around US$25 million after staff joined a video call with deepfake colleagues. Targeting smaller businesses is easier because there are fewer approval steps.
Rules that stop most of it
- No payment or bank detail change on a call or message alone: always verify on a known second channel
- Two people approve any payment over a set limit
- An agreed code word for urgent requests from leadership
- Never share MFA codes, even with “IT” or “the bank”
- Report anything odd, with no blame, to your IT provider
How ABCOM helps
We combine awareness training with email filtering, MFA and identity monitoring, and staff can phone our helpdesk on 01444 871 200 to ask “is this genuine?”.
Quick answers
How can staff spot a deepfake?
Do not rely on spotting visual glitches, which are improving. Rely on process: verify unusual requests on a second known channel and never act on urgency alone.
Want a short session to teach your team to spot these scams?
Related answers and guides
- What is business email compromise?
- How can staff spot a phishing email?
- What is user awareness training?
- Cybersecurity Awareness Month 2026
- All ABCOM FAQs
Sources and further reading
Related questions
Want this sorted for you?
Talk to our Burgess Hill team about cyber security services. Free, friendly and no obligation.