Agentic-AI vishing lure — email directs victim to call a phone number where an AI voice agent conducts the credential-harvest or fraud

Agentic-AI vishing (voice phishing) lure: email directs victim to call a phone number where an autonomous AI voice agent conducts the credential-harvest or fraud conversation. Traditional vishing required human call-center operators, limiting scale. In 2026, threat actors deploy AI voice agents that conduct unlimited simultaneous vishing calls — impersonating Microsoft support, Amazon fraud teams, IRS agents, and bank security departments — with convincing real-time dialogue generated by LLMs. The email lure establishes urgency (account suspended, fraud detected, refund on hold) and provides a toll-free or local phone number, instructing the victim to call immediately. The AI agent on the other end collects credentials, OTPs, credit card numbers, or wire transfer approvals. The signal fires when: (1) body references a major brand (Microsoft, Apple, Amazon, Google, PayPal, IRS, etc.) AND (2) a phone number is present AND (3) an explicit call-to-action to phone the number is present AND (4) sender is NOT from the brand's official domain AND (5) no List-Unsubscribe or In-Reply-To header. Source: GC1 R12 council #9; FBI IC3 2026 vishing advisory; CISA AI-assisted social engineering alert Q1 2026.