# What are smishing and vishing?

They are phishing by other channels. Smishing uses text messages, often about parcels, banks, tax refunds or a blocked account, with a link to a fake login page. Vishing uses voice calls: someone poses as IT support, the bank, a supplier or a manager and talks the person into reading out a code, installing a remote-support tool or approving a payment. Vishing has become a common way into companies because a convincing caller can get past controls that stop e-mail, for example by asking the help desk to reset an employee's password or register a new MFA device. Useful defences: a rule that IT never asks for passwords or codes by phone, a help-desk procedure that verifies identity before any reset, and the habit of calling back on a known number. A network sensor cannot hear calls, but it does show the new outside services a device starts talking to afterwards.

FAQ: [Phishing and e-mail aftermath](https://netsenx.com/en/faq/phishing) · https://netsenx.com/en/faq/what-is-smishing-and-vishing

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/what-is-ndr

## Related questions

- [What is QR code phishing?](https://netsenx.com/en/faq/what-is-qr-code-phishing)
- [What is business e-mail compromise (BEC)?](https://netsenx.com/en/faq/what-is-business-email-compromise)
- [Can network monitoring stop CEO fraud?](https://netsenx.com/en/faq/can-network-monitoring-stop-ceo-fraud)
- [Can a phishing e-mail come from a colleague's real account?](https://netsenx.com/en/faq/can-phishing-come-from-a-colleagues-real-account)
- [A supplier asks us to change their bank details. How do we check it is genuine?](https://netsenx.com/en/faq/supplier-asks-to-change-bank-details)