TOAD stands for Telephone-Oriented Attack Delivery, a social engineering technique in cybersecurity. Unlike traditional phishing, where attackers lure victims through malicious links or attachments, TOAD attacks use phone numbers as the primary payload. Victims are tricked into calling a number, often believing they are contacting a legitimate organization such as a bank or tech support. Once on the call, attackers use persuasive tactics to extract sensitive information or convince victims to perform risky actions, such as installing malware or transferring funds. TOAD exploits the trust users place in phone communications and is increasingly used to bypass email security filters.