Generating customized authentication questions for automated vishing detection

A method comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• training, using historical call information, an identity verification model, wherein training the identity verification model configures the identity verification model to identify, for an initiated call between a first individual and a second individual, one or more authentication questions to validate an identity of the first individual;
• detecting a first call between the first individual and the second individual, wherein the first individual comprises one of:
• an employee of an enterprise or an impersonator of the employee of the enterprise;
• temporarily pausing the first call;
• inputting, into the identity verification model and while the first call is paused, information of one or more of:
• the first call, the first individual, or the second individual, wherein inputting the information causes the identity verification model to output the one or more authentication questions;
• sending, while the first call is paused and to a user device of the first individual, the one or more authentication questions and one or more commands directing the user device of the first individual to present the one or more authentication questions, wherein sending the one or more commands directing the user device of the first individual to present the one or more authentication questions causes the user device of the first individual to output the one or more authentication questions;
• receiving, while the first call is paused and from the user device of the first individual, authentication information comprising responses to the one or more authentication questions;
• validating, while the first call is paused, the authentication information;
• and
• based on successful validation of the authentication information, causing the first call to resume.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• train, using historical call information, an identity verification model, wherein training the identity verification model configures the identity verification model to identify, for an initiated call between a first individual and a second individual, one or more authentication questions to validate an identity of the first individual;
• detect a first call between the first individual and the second individual, wherein the first individual comprises one of:
• an employee of an enterprise or an impersonator of the employee of the enterprise;
• temporarily pause the first call;
• input, into the identity verification model and while the first call is paused, information of one or more of:
• the first call, the first individual, or the second individual, wherein inputting the information causes the identity verification model to output the one or more authentication questions;
• send, while the first call is paused and to a user device of the first individual, the one or more authentication questions and one or more commands directing the user device of the first individual to present the one or more authentication questions, wherein sending the one or more commands directing the user device of the first individual to present the one or more authentication questions causes the user device of the first individual to output the one or more authentication questions;
• receive, while the first call is paused and from the user device of the first individual, authentication information comprising responses to the one or more authentication questions;
• validate, while the first call is paused, the authentication information;
• and
• based on successful validation of the authentication information, cause the first call to resume.