New: Account Recovery+ for Entra ID Read Now
A simple solution to stopping sophisticated social engineering attacks. Patent-pending.
Cyber criminals are calling employees posing as company IT help desk agents and persuading them to install software, disclose credentials and give remote access. Agent Verify provides a simple and secure way for employees to verify that a caller claiming to be from the IT help desk is legitimate.
Proving your help desk is really your help desk sets out what CISA documents about these calls and what a check like this has to do.
Software agents raise a different question. Verifying the human behind an AI agent covers who checks the person an AI agent is acting for.
Anywhere a trusted voice on the phone is being used as an attack surface.
Verification happens out of band, in seconds, before a single credential or instruction is shared.
Treat any unexpected call from IT as unverified until you check it yourself. Do not share a credential or install anything. Hang up, then call the help desk back on the number in your company directory, not the one that called you. Report the call to security.
Agent Verify, part of the ATO Protect Suite, lets the employee who receives the call check it. The human help desk agent who places the call shares a Verify Code that is single-use, time-limited and unique to that agent and call. Agents share it only on outbound calls they start. The employee enters the code on a dedicated internal company page, which confirms the agent's identity. If no verifiable code is provided, the call ends and the incident is reported.
When receiving a call, the employee is trained to ask for the agent's Verify Code, which is unique to both the agent and the call.
The employee navigates to a dedicated internal company page where the code is entered, and the agent's identity is confirmed.
Once the agent is verified, the employee can proceed. If the agent cannot provide a verifiable code, the call ends and the incident is reported.
ATO Protect - Agent Verify lets the employee who receives a call verify that a caller claiming to be from the IT help desk is legitimate. It addresses attackers who phone employees while posing as IT help desk agents. It is part of the ATO Protect Suite and is patent-pending.
Check the call yourself instead of trusting the caller. Do not share a credential or install anything. Hang up, call the help desk back on the number in your company directory, and report the call. With Agent Verify, the human help desk agent who places the call shares a single-use, time-limited Verify Code, and the employee enters it on a dedicated internal company page. If no verifiable code is provided, the call ends and the incident is reported.
Agent Verify is for outbound calls where the person who answers has to trust the voice on the line. That includes IT help desk agents calling employees, banks calling customers to verify transactions, eCommerce retailers calling customers to verify orders, healthcare providers calling patients, and title, escrow and mortgage companies calling home buyers.
A Verify Code is a single-use, time-limited code that is unique to both the help desk agent and the call. Agents share it only during outbound calls they initiate. The employee who receives the call asks for it and enters it on a dedicated internal company page.
No. The agent in Agent Verify is the person placing the call, such as a human help desk agent, and the employee who receives the call does the verifying. AI agents raise a different question: who checks the person an AI agent is acting for.
Give your employees a verification step that attackers can't fake, no matter how convincing the voice on the other end.
Get Started TodayOne of Scattered Spider's most effective and recognizable tactics involves impersonating IT help desk personnel via phone calls or text messages to obtain credentials or persuade employees to install remote access software.
Agent Verify, built for the calls that carry the most risk. When one executive calls another to approve a wire or act on a confidential request, Exec Verify checks that the person on the line is really who they claim to be, before anything moves forward.
Attackers can now clone a senior leader's voice and face well enough to fool the people who work with them every day. Exec Verify gives two executives a fast way to confirm they're really talking to each other, so a faked call doesn't become a real transfer.