By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.
The AI Voice Call That Asked for My CVV
Disclaimer: This story is fictional but inspired by real AI-powered voice phishing (vishing) attacks reported around the world. It is written to educate readers about emerging cyber threats and social engineering.
The Call Came at the Worst Time
It was late Friday afternoon.
I had just finished work when my phone rang.
The caller ID displayed the name of my bank.
I answered immediately.
A calm, professional voice greeted me.
“Good afternoon. This is the Fraud Prevention Department. We’re calling because we’ve detected suspicious activity on your credit card.”
The voice sounded confident.
Polite.
Professional.
Nothing about it seemed unusual.
They Already Knew My Name
Before I could ask any questions, the caller addressed me by my full name.
They also confirmed:
- My home address.
- The last four digits of my credit card.
- My mobile phone number.
Everything matched.
I immediately assumed I was speaking to a genuine bank employee.
After all…
How could a scammer know that much?
The Fraud Sounded Real
The caller explained that someone had attempted to use my credit card for a large online purchase.
He reassured me.
“Don’t worry. We’ve already blocked the transaction.”
I felt relieved.
Then he continued.
“We simply need to verify that you’re the legitimate cardholder before we permanently secure your account.”
That sounded completely reasonable.
The Voice Was Surprisingly Human
There were no awkward pauses.
No robotic pronunciation.
No strange background noise.
The conversation flowed naturally.
The caller even responded appropriately when I interrupted with questions.
It felt exactly like speaking with a real customer service representative.
Years ago, I probably would have recognised a computer-generated voice.
Not anymore.
The Verification Started Normally
First, he asked simple questions.
My date of birth.
My postcode.
The last transaction I remembered making.
None of those questions seemed unusual.
Then he explained they needed to verify my physical credit card.
The Question That Changed Everything
He politely asked me to take out my card.
I did.
Then he said:
“Please confirm the full card number.”
I read it aloud.
Next, he asked for the expiration date.
Again, I answered.
Then came one final request.
“For security purposes, could you please confirm the three-digit CVV on the back of your card?”
For just a moment…
I hesitated.
Something about that request didn’t feel right.
Banks already issue the card.
Why would they need me to read the security code back to them?
That single moment of doubt may have saved me from becoming the next victim of an AI-powered voice scam.
(Continue in Part 2, where I’ll explain how the caller reacted when I questioned the request, reveal how AI voice scams are changing financial fraud, and show why modern voice phishing is far more convincing than traditional scam calls.)