← Vercon Research

3 min read

Security Operations·

Account Recovery Is a Voice Channel Problem

LH
Lesia Hawkins
Director, Threat Research & Intelligence, Vercon
team reviewing operational dashboards

Most organizations already have policies for security operations. The failure point is usually the handoff: what the employee hears, what the system records, and what the next person is allowed to assume.

A useful public reference point is Google Cloud / Mandiant's "UNC3944 Proactive Hardening Recommendations" (2024-04-08), which shows why voice, identity, and approval controls now belong in the same operating conversation.

For Vercon customers, the immediate work is not to buy one more tool and call the problem solved. The first step is to make the voice channel observable: who called, what they requested, which identity checks were used, whether the call touched billing or access, and where the handoff went next.

The right dashboard should make accumulation visible: minutes, messages, recordings, transcripts, AI-agent sessions, and compliance events should all point back to the business process that created them.

The point is not to make every call suspicious. The point is to stop treating the telephone as a low-risk side channel. In an AI-assisted fraud environment, the voice channel deserves the same management discipline as login, payments, email, and customer data access.

Referenced reporting

Links are provided for reference and are not legal advice or a guarantee of verification.

#account recovery#vishing#help desk

Find out where your communications channels are exposed.

A Vercon Communications Security Assessment gives you an executive-readable risk report and a prioritized remediation roadmap, usually inside of four weeks.