Skip to content
atlas

Don't confuse these

Smishing vs Vishing

Why they differ

Smishing sends a written message and waits for a click; vishing uses a live voice to push the victim in real time.

Smishing

People, culture & awareness

Phishing sent as a text message, usually a short, urgent note with a link or a number to call.

Formal

A form of phishing delivered by text message or chat app instead of email; the short format hides the real sender and the full link address, and texts usually pass through fewer filters than work email.

In plain English

Like a fake parking ticket tucked under your wiper - it looks official enough that you pay before you check.

In practice

The secretary at a school gets a text, apparently from the municipality's IT department, saying her account closes today unless she confirms her login; the link leads to a copy of the municipality's login page.

Why it matters

People read texts within minutes and trust their phone more than their inbox, while work phones often sit outside the organisation's usual protection.

Vishing

People, culture & awareness

Tricking people over the phone or a voice call into giving away information, codes or money.

Formal

A form of social engineering carried out by voice, where the attacker poses as a bank, IT support or a manager and uses tone, urgency and a faked caller number to push the target into acting at once; newer versions use a computer-made copy of a known person's voice.

In plain English

Like a smooth-talking salesman on the phone who never lets you pause long enough to think.

In practice

A clerk at a pension fund gets a call from “the IT help desk” about a problem with her account, and is talked into reading out the MFA code that has just arrived on her phone.

Why it matters

A live voice builds trust and pressure faster than any email, and a code read out loud can get an attacker past MFA.

Shared connections

Atlas is in beta.