Vishing is Voice-Phishing; Smishing is SMS-Phishing. Concept Definitions: Phishing is the broad category of social engineering where attackers masquerade as trusted entities (usually via email). Vishing (Voice Phishing) is when the fraudster uses telephone calls (often using IVR or human imposters posing as bank officials) to trick the victim into revealing OTPs, CVVs, or passwords. Smishing (SMS Phishing) is when the fraudster uses text messages (SMS) containing malicious links or urgent warnings (e.g., "Your KYC is expired, click here") to steal data or install malware.