It's run against a defined universe of numbers, with the customer's explicit authorization. It's not sold as a self-service feature, to avoid misuse of the channel.
HRM glossary
Smishing
Phishing via SMS. At Whalemate it runs as a professional service, not a native channel.
Definition
Social engineering — Manipulating a person, not a system, to get an action or a piece of data.
SSO / SAML 2.0 — Single sign-on using the SAML 2.0 protocol.
USB Drop — Leaving a physical device (USB) to see who plugs it in.
Vishing — Phishing via voice call, including voice cloning.
HRM glossary
Questions about Smishing
What is Smishing?
Phishing via SMS. At Whalemate it runs as a professional service, not a native channel.
How does Whalemate use it?
It's run against a defined universe of numbers, with the customer's explicit authorization. It's not sold as a self-service feature, to avoid misuse of the channel.
Blog
Articles, guides and analysis on human risk management,
awareness and security culture
Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.

HRM
Sep 11, 2026By Federico Hombre
APWG and PCI DSS: Smishing Is Rising
Smishing is growing on mobile channels while PCI DSS v4.0 requires annual awareness training and explicit phishing and social engineering content.
Read moreWant to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.