AI vishing: are callback checks and MFA enough now?

TL;DR: AI vishing uses cloned or synthetic voices to trick employees into sharing credentials, MFA codes, and payment approvals, and cites cases hitting major financial firms, Apollo, Cisco, and others as evidence that voice trust is now a weak control, according to Riot. The decisive defence is process isolation, not voice recognition.

Editorial analysis by NHI Mgmt Group, based on content published by Riot: “AI Vishing: How It Works, Why It’s Dangerous, and How to Stop It”.

By the numbers:

• Cisco Talos reported that vishing made up over 60% of all phishing-related incident response engagements in Q1 2025.
• The UC Berkeley study found people could mistake a cloned voice for the real speaker in up around 80% of instances.
• Google's Threat Intelligence Group linked vishing gangs to attacks targeting Apollo, Blackstone, KKR, Bain Capital, and other top financial firms in 2026.

Key questions

Q: What breaks when organisations rely on voice recognition or caller ID to approve sensitive access requests?

A: Voice recognition and caller ID break down because both are easy to spoof or synthesize.

Q: Why do vishing attacks still lead to remote access even when MFA is enabled?

A: Because the attacker is not bypassing MFA in a technical sense, they are using social engineering to trigger a legitimate login or recovery flow.

Q: What are the signs that an AI vishing call is trying to bypass controls?

A: The main signs are urgency, secrecy, pressure to skip normal verification, and a request to keep the conversation isolated from colleagues.

Practitioner guidance

• Adopt out-of-band callback verification for all high-risk requests Require staff to end the call and validate the request through a known directory number before any credential reset, MFA change, or payment approval.
• Add two-person approval for access and payment changes Make credential resets, MFA re-enrollment, wire transfers, and vendor-payment changes require an independent second approver who was not on the original call.
• Restrict what public audio and org data can be used for pretexting Reduce voicemail exposure, review conference recordings, and limit publicly visible role relationships that attackers can use to build convincing impersonations.

Bottom line: AI vishing turns voice trust into a controllable attack surface, and the failure point is the approval process rather than the speech model itself.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →