Call transfer is a telephony or app feature that moves an active call from one endpoint to another, such as from a phone to a desk phone, a support queue, or another user device. The call session continues, but control and media handling shift to the new endpoint.
In cyber security, call transfer matters because the handoff can change who can hear, record, or control the conversation. Attackers may try to exploit weak transfer checks through social engineering, impersonation, or UI confusion, tricking a user into sending a live call to the wrong destination. Defenders reduce this risk with clear prompts, destination verification, strong identity binding, audit logs, and transfer rules that match the caller’s permissions and session state.