I thought I would pass this on to the SysAdmin community. I was one of the people in my office to get this call. I knew it was a scam right away (bad TTS, the fact that VM doesn't call you - you call it, etc) but some people in my office asked about it. Luckily nobody fell for it.

So apparently the scammers are trying to be a little smarter. Instead of just using a local area code and prefix, one scamming organization has begun to spoof the number that you would dial to get to your voice mail. Most people don't even know this number, they just pick the icon on their phone.

So what happened to me was, I get a call that says it's from my "Voicemail". I answer it, and with a really poor TTS, it tells me that my account has been suspended and that I will not be able to send or receive any calls or texts unless I validate my account. Then it asks me to press 1 to use the automated system, or 2 to talk to a person.

I picked #2, and a few seconds later a person with a heavy accent answered, said they were from my phone carrier, and needed to validate my PIN to re-active my account. I told them that I knew they were a scammer because I work for that phone carrier so I know that account is in good standing and I know that the phone carrier would never call me like this. They of course hung up on me.

This is a new twist on an older scam where once they get your PIN they are able to get into your account over the phone and validate themselves and then order phones or services, makes changes, etc.

So please let your users know that getting a phone call from their voicemail does not make it legit!

Edit: to clarify a bit. The TTS/Scammer isn't asking for the Voicemail PIN. They are asking for your ACCOUNT PIN. The Voicemail PIN won't get you anything. The ACCOUNT PIN will let them order phones, make changes to addresses, etc, etc.