The Latest Scams

Callback phishing: What it is and how to stay safe

October 24, 2023

Callback phishing is a type of phishing scam where cybercriminals send you an email with a phone number to call, often claiming that an urgent issue needs your attention. When you call the number, you are greeted by an automated voice message or a live person who will try to trick you into revealing sensitive information, such as your credit card number, social security number, or login credentials.

Callback phishing scams are particularly effective because they prey on people’s trust in phone calls. After all, it is safer to call a company than to click on a link in an email. Wrong. Cybercriminals can easily spoof phone numbers to make it look like they are calling from a legitimate company.

Here are some tips on how to stay safe from callback phishing scams:

Never call a phone number that is included in an email. Instead, navigate to the company’s official website and find the contact information there.
Be wary of emails that create a sense of urgency. Phishing emails often try to pressure you into acting quickly without thinking. If an email says that you need to call immediately, or else your account will be suspended, it’s probably a scam.
If you do call the number in an email, be careful about what information you share. Never give out sensitive information, such as your credit card number or social security number, over the phone unless you are sure you are speaking to a legitimate company representative.

If you think you may have been the victim of a callback phishing scam, immediately contact the company that the scammers were impersonating. You should also change your passwords and monitor your credit report for suspicious activity.

Here are some additional tips to help you protect yourself from phishing attacks in general:

Be suspicious of unsolicited emails, even if they appear from a legitimate company.
Hover over links before clicking on them to see the actual URL. If the URL doesn’t match the company’s website address, don’t click on it.
Keep your software updated, including your web browser, operating system, and antivirus software.
Use a strong password manager to create and store unique passwords for your online accounts.

Following these tips can help protect yourself from callback phishing scams and other phishing attacks.

Your employees are your first line of cybersecurity. Provide them with the best security awareness training program, KnowBe4. Contact Citynet today for a free demo of this dynamic platform and give your staff critical, ongoing security training to protect both them and your network. Call Citynet at 1.844.CITYNET (844.248.9638) to learn more.

Like This Post?

Cybersecurity

You’ve Been Served… a Scam!

Beware of Fake Toll Violation Text Messages Cybercriminals are constantly evolving their tactics to trick people into giving up sensitive information. One of the latest scams circulating involves fake toll violation notices sent by text message. At first glance, the message looks convincing. It claims you have an unpaid traffic toll that must be paid immediately. The text often includes

March 11, 2026

Cybersecurity

Cybercriminals Are Now Calling Your Employees

Is Your Business Prepared? Cyber threats are evolving, and one of the fastest-growing tactics right now is social engineering through trusted communication platforms. Instead of trying to hack their way in, cybercriminals are increasingly talking their way in. Attackers are impersonating IT staff, executives, vendors, and even coworkers via phone calls and collaboration tools such as Microsoft Teams, Webex, and other messaging

March 5, 2026

Cybersecurity

Shadow IT: The Apps Your Employees Use That IT Doesn’t Know About

When most businesses think about cybersecurity risk, they picture hackers breaking in from the outside. But one of the fastest-growing risks isn’t external at all. It’s happening inside your organization…quietly, unintentionally, and often with good intentions. It’s called Shadow IT. And it’s growing faster than most businesses realize. What Is Shadow IT? Shadow IT refers to any software, app, cloud platform,

February 23, 2026

Cybersecurity

The New Employee Is Your Biggest Security Risk

(And It’s Not Their Fault) When businesses think about cybersecurity risk, they often picture hackers, ransomware, or sophisticated phishing attacks. But one of the most common — and overlooked — security risks starts on day one: A new employee. Not because they’re careless.Not because they’re malicious.But because onboarding and offboarding processes often leave dangerous gaps. If those gaps aren’t managed

February 23, 2026

Cybersecurity

The New Reality of Cyber Insurance Requirements for Small Businesses

Cyber insurance used to feel like a safety net. Today, it’s starting to feel more like an application for a mortgage. Across the country, insurance providers are tightening requirements, raising premiums, and even denying claims when businesses don’t meet modern cybersecurity standards. Many small and mid-sized organizations are discovering this shift the hard way, during policy renewal or after filing

February 19, 2026

Cybersecurity

Citynet and Red Siege Webinar Inside the Attacker’s Playbook

Cybersecurity isn’t just about defense — it’s about understanding how real attackers think. Join Citynet’s Craig Behr and Red Siege’s Tim Medin for an upcoming webinar, Inside the Attacker’s Playbook, where we’ll break down how real-world offensive operations uncover gaps — and how organizations can use those insights to reduce cyber risk before it becomes a business problem. Play Video

February 5, 2026