Social engineering is the manipulation of people into taking actions that compromise their security or privacy. The three most common types of social engineering attacks are phishing, smishing and vishing. These methods of identity fraud differ in how scammers contact you—by email, text or phone.
Phishing, smishing, and vishing are all techniques used by hackers to scam individuals and steal their personal information and money. Phishing uses emails and links, smishing uses text messages or common messaging apps, and vishing uses voice calls and voicemails to obtain sensitive information.
Let’s explore the differences between phishing, smishing, and vishing:
- Phishing:
-
- Method: Phishing involves fraudulent emails and fake spoofed websites that attempt to trick victims into clicking on malicious links.
- Goal: To steal personal information (e.g. usernames, passwords, account numbers).
- Example: An email claiming your account is locked and asking you to click a link to regain access, which leads to a fake form collecting your details.
- Smishing:
-
- Method: Smishing targets users through deceptive text messages (SMS).
- Goal: Similar to phishing, it aims to steal information or download malware.
- Example: Urgent text message from a bank, delivery service, or prize sponsor asking you to take quick action (e.g. verify account details, track a package, or claim a reward) by clicking a link that leads to a fraudulent form.
- Vishing:
-
- Method: Vishing involves fraudulent phone calls or voicemails to manipulate victims.
- Goal: Scammers pretend to be legitimate entities (Microsoft, IRS, utility companies) and ask you for private info (e.g. password, bank account, social security number).
- Example: An unsolicited tech support call, where an alleged agent requests sensitive log-in details for your computer.
Remember to stay vigilant and verify any unexpected requests for your personal information!
