HRM glossary

Smishing

Phishing via SMS. At Whalemate it runs as a professional service, not a native channel.

What is Smishing?

It's run against a defined universe of numbers, with the customer's explicit authorization. It's not sold as a self-service feature, to avoid misuse of the channel.

HRM glossary

Phishing — NIST defines phishing as deceptive messages that trick people into clicking malicious links or downloading software.

Phisher — A phisher is a cybercriminal who tricks people into revealing sensitive information through phishing and social engineering.

Social engineering — Manipulating a person, not a system, to get an action or a piece of data.

QRishing — Phishing via QR code: the lure asks you to scan, not to click a link.

HRM glossary

Questions about Smishing

What is Smishing?

Phishing via SMS. At Whalemate it runs as a professional service, not a native channel.

How does Whalemate use it?

It's run against a defined universe of numbers, with the customer's explicit authorization. It's not sold as a self-service feature, to avoid misuse of the channel.

Blog

Articles, guides and analysis on human risk management,
awareness and security culture

Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.

HRM

Sep 30, 2026By Federico Hombre

Smishing and vishing under PCI DSS 12.6

SMS and voice are not the same for CISOs and compliance. PCI DSS 12.6 requires formal awareness and separate measurement of both channels.

PCI DSS 12.6: Vishing and Smishing Scope

HRM

Sep 18, 2026By Federico Hombre

PCI DSS 12.6: Vishing and Smishing Scope

Vishing and smishing are no longer just phishing variants. Under PCI DSS 12.6, they require a formal program, channel metrics, and steady improvement.