Voice over Internet Protocol (VoIP) faces three major security challenges which include lack of authentication, spoofing and exposure of unencrypted data, and unwanted traffic. Because IP traffic is not authenticated, malicious users can easily spoof a business' IP address and call a customer pretending to be someone else. Despite these threats to security, securing VoIP is not as hard as small and medium-sized businesses (SMBs) may think. Every VoIP system should have security controls in place such as restricted access to its servers and intrusion detection systems. There are also four key recommendations SMBs should take to safeguard VoIP.