The category that covers phishing, QRishing, smishing, vishing, USB Drop and deepfake. The platform natively covers the first two; the rest run as a service.
HRM glossary
Social engineering
Manipulating a person, not a system, to get an action or a piece of data.
Definition
SSO / SAML 2.0 — Single sign-on using the SAML 2.0 protocol.
USB Drop — Leaving a physical device (USB) to see who plugs it in.
Vishing — Phishing via voice call, including voice cloning.
2FA / MFA — Second authentication factor, native for platform administrators.
HRM glossary
Questions about Social engineering
What is Social engineering?
Manipulating a person, not a system, to get an action or a piece of data.
How does Whalemate use it?
The category that covers phishing, QRishing, smishing, vishing, USB Drop and deepfake. The platform natively covers the first two; the rest run as a service.
Blog
Articles, guides and analysis on human risk management,
awareness and security culture
Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.

HRM
Sep 11, 2026By Federico Hombre
APWG and PCI DSS: Smishing Is Rising
Smishing is growing on mobile channels while PCI DSS v4.0 requires annual awareness training and explicit phishing and social engineering content.
Read moreWant to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.