Two Words to Avoid on Calls to Prevent Extortion Scams

Vishing, a sophisticated scam technique that leverages phone calls to trick individuals into revealing sensitive personal data, is becoming a pervasive threat. In Mexico, a 2025 study by The Competitive Intelligence Unit (The CIU) revealed that a staggering 34% of internet users received suspicious calls soliciting personal information. These calls often involve criminals impersonating representatives from legitimate entities such as banks, social media platforms, or public institutions.

The primary goal of these vishing attacks is to commit various crimes, including financial fraud, extortion, and identity theft. Victims may be coerced into providing information that grants criminals access to their bank accounts, credit cards, or other sensitive digital profiles. The psychological pressure of these calls can make it difficult for individuals to maintain composure, leading them to inadvertently disclose critical security details.

To combat this growing menace, experts strongly advise against uttering two specific words during unsolicited calls: "PIN" and "verification code." A PIN, typically a 4-to-6-digit security code, can grant cybercriminals direct access to financial accounts, enabling unauthorized purchases. Similarly, a verification code, used to authenticate user identity for banking access, transactions, or app logins like WhatsApp, can compromise personal information and lead to severe security breaches.

If you receive a call from an unknown number and are asked for such information, the safest course of action is to immediately hang up. Do not engage further with the caller. Instead, independently contact the institution the caller claimed to represent using a verified phone number obtained from their official website or a trusted source. For those who unfortunately fall victim to such fraud, the National Commission for the Protection and Defense of Financial Users (CONDUSEF) in Mexico offers resources and assistance.