It's a twist on the phishing scams that began in 2003. In the most common form, a phishing con begins with a bogus e-mail designed to look like it came from a financial institution. It's sent out en masse and includes a link to a fraudulent Web site designed to steal financial information. Victims click on the link and fill in their account numbers, and away go the thieves.

Law enforcement calls the new con "vishing" -- voice phishing.

If you receive what you think is a vishing e-mail or phone call, call your bank or creditor, using the number on your card and ask if they tried to contact you.

If you find out your bank, creditor or escrow service didn't contact you, notify them, as well as the Internet Crime Complaint Center and the Federal Trade Commission. Forward the e-mail to spam@uce.gov. Visit the FTC's identity theft Web site if you've responded to a vishing e-mail.

E-mails spoofing PayPal should get sent to spoof@paypal.com. Report calls spoofing TDS, AT&T or other telecommunication companies to the Wisconsin Department of Agriculture, Trade and Consumer Protection, at 1-800-422-7128.