A professional service that simulates the pressure of a real-time call, with or without a cloned voice of an organization leader.
HRM glossary
Vishing
Phishing via voice call, including voice cloning.
What is Vishing?
Phishing — NIST defines phishing as deceptive messages that trick people into clicking malicious links or downloading software.
Phisher — A phisher is a cybercriminal who tricks people into revealing sensitive information through phishing and social engineering.
Social engineering — Manipulating a person, not a system, to get an action or a piece of data.
QRishing — Phishing via QR code: the lure asks you to scan, not to click a link.
HRM glossary
Questions about Vishing
What is Vishing?
Phishing via voice call, including voice cloning.
How does Whalemate use it?
A professional service that simulates the pressure of a real-time call, with or without a cloned voice of an organization leader.
Blog
Articles, guides and analysis on human risk management,
awareness and security culture
Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.
HRM
Sep 30, 2026By Federico Hombre
Smishing and vishing under PCI DSS 12.6
SMS and voice are not the same for CISOs and compliance. PCI DSS 12.6 requires formal awareness and separate measurement of both channels.
Read more
HRM
Sep 18, 2026By Federico Hombre
PCI DSS 12.6: Vishing and Smishing Scope
Vishing and smishing are no longer just phishing variants. Under PCI DSS 12.6, they require a formal program, channel metrics, and steady improvement.
Read more
HRM
Sep 16, 2026By Federico Hombre
PCI DSS 12.6 Requires Vishing Coverage
Vishing and smishing are voice and SMS phishing. Under PCI DSS 12.6, measuring only email or course completion leaves a compliance gap.
Read moreWant to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.