2024 Voice Phishing (Vishing) Response Report
See which industries and departments shared sensitive information on simulated vishing calls, and where to focus training first.
What the data shows
- 53.2%of calls reached vishing-aware employees, who hung up or refused to share data (82 companies, 2023 to 2024).Page 5, in the full report
- 40.3%of calls got no response, so the report cannot say whether those employees spotted the threat.Page 5, in the full report
- 19.2%of employees in Manufacturing & Engineering were vished, the highest rate among named industries.Page 6, in the full report
- 3.8%of employees in Technology & IT were vished, the lowest industry rate in the study.Page 6, in the full report
- 11.5%of Customer Support employees were vished, the highest departmental rate in the study.Page 8, in the full report
- 1.4%of Sales & Marketing employees were vished, a low rate despite frequent external calls.Page 8, in the full report
Start reading
- 1 / 20
- 2 / 20
- 3 / 20
- 4 / 20
Read the other 16 pages
They open right here. You can also download the PDF.
Tap a page to read it full size.
What the report covers
- Executive summary and key findings
- Methodology
- Overall findings
- Industry analysis
- Department analysis
- Comparative analysis
- Best practices and recommendations
- Case study: Teknosa
Who it is for
CISOs and awareness managers who need to know which departments and industries are most susceptible to vishing, so they can target call-based training.
How the data was collected
- Sample
- 3,279 employees called across 82 companies that consented to take part
- Period
- 15 January 2023 to 15 January 2024
- Source
- Keepnet AI-based vishing simulation campaigns run for customers
- Note
- Data was anonymised and handled under GDPR and CCPA. Industries and departments were merged into groups, with unspecified ones listed as Others. No per-industry or per-department sample sizes are given.
Cite this report
Keepnet (2024). 2024 Voice Phishing (Vishing) Response Report. https://keepnetlabs.com/reports/2024-voice-phishing-response-report
Figures on this page may be quoted with this citation.
Vishing Simulator
Run realistic voice phishing simulations by department, with training during or after the call.
About this report
Vishing is voice phishing. It is a social engineering attack where attackers manipulate employees into revealing confidential information over phone calls.
Keepnet ran simulated vishing campaigns between 15 January 2023 and 15 January 2024. 82 companies consented to take part and 3,279 employees were called. The data was anonymised.
An employee is counted as vished when they share sensitive information during a vishing test. Vishing-aware employees refuse to share information or end the call.
Customer Support had the highest vished rate at 11.5%, followed by Information Technology at 7.1%. The report links this to frequent contact with outside parties.
Keep reading
The Mobile Phishing Visibility Gap
~40%higher click rate on phone-based simulations than on email (Verizon DBIR 2026).Read the key findings
Cut Human-Driven Incidents: A CISO Playbook for Measurable Behaviour Change
76% vs 60%Most large firms train employees, yet human factors still sit behind most breaches.Read the key findings
2025 New Hires Phishing Susceptibility Report
44%more susceptible to phishing: new hires in their first 90 days compared with tenured employeesRead the key findings
The State of the Smish Report 2023
74%of organisations experienced a smishing attack in 2021, according to Safety Detectives.Read the key findings
2021 Email Security Vulnerability Report
90.56%of checked malicious test emails reached the target inbox past the security tools in place.Read the key findings
MSSP Business Model
$1.3 millionis the payroll an in-house team can reach once it staffs its own 24x7 SOC, according to Cipher.Read the key findings
2020 Phishing Trends Report
50.42%of simulated phishing emails were opened by the target in 2019.Read the key findings
Threat Sharing
206 dayswas the average time to detect a breach, according to IBM's 2019 Cost of a Data Breach Report.Read the key findings
See how Keepnet would act on these findings for you
- Run multi-channel simulationsFrom email through to deepfake.
- See reporting outcomes and the behaviour scoreReporting, repeat behaviour and remediation, in one board report.
- Explore AI agents and automationSee how simulations, training and follow-up can run with less manual work.
Book a 30-minute demo
Thirty minutes, no cost and no obligation.
Thank you, your request is in
A confirmation is on its way to your inbox.
Thirty minutes with the Keepnet team, on Microsoft Teams. Your details are already filled in.
Prefer to pick a time later? The team will follow up within one working day.
Your demo is booked
A calendar invite is on its way to your inbox, with a Microsoft Teams link.
The booking calendar will not open in this page.
Open the calendar in a new tab