banking. The user logs in to the bank on a computer, the bank activates the phone app, the user enters a password in the phone and is logged in. In this scam, malicious actors called people, claimed to be a bank officer, claimed there was a security problem and asked the victim to use their Mobile Bank ID app. Fraudsters were then able to log in to the victim's account without the victim ever giving away their password. The fraudster was then able to transfer money from the victim's account. If the victim was a customer of the Swedish bank Nordea, scammers were also able to use the victim's account directly from their phone. In 2018, the app was changed to require users to photograph a QR code on their computer screen. This ensures that the phone and the computer are physically located in the same room, which has mostly eliminated this type of fraud. See also Phone fraud SMiShing Voice cloning VoIP spam References External links https://www.bbc.co.uk/news/business-34425717 Legal career "hit by vishing scam" https://www.bbc.co.uk/news/business-34153962 Caught on tape: How phone scammers tricked a victim out of £12,000 By Joe Lynam & Ben Carter BBC News vnunet.com story: Cyber-criminals switch to VoIP "vishing" BBC News story: Criminals exploit net phone calls The Paper PC: Messaging Security 2006: Vishing: The Next Big Cyber Headache? The Register: FBI warns over "alarming" rise in American "vishing" Vice Media: How a Hacker Can Take Over Your Life by Hijacking Your Phone Number An assessment of how call centre staff handle a vishing call. Fraud Computer security exploits Deception Telephony Voice over IP Social engineering (computer security)