The Types of Phishing, Explained Side by Side
A side-by-side comparison of the main types of phishing: which channel each uses, who it targets, what it wants, and the one check that stops it.
Phishing comes in many forms, and the names can be confusing: smishing, vishing, whaling, quishing. Underneath, they all try to trick you into acting on a message you should have checked. This table puts them side by side.
The main types compared
| Type | Channel | Target | Usually wants |
|---|---|---|---|
| Bulk phishing | Everyone | Passwords, card details | |
| Smishing | Text message | Everyone with a phone | Card details, bank logins. See smishing |
| Vishing | Phone call | Bank customers, staff | Codes, transfers, remote access. See vishing |
| Quishing | QR codes | People in public places, parking | Payments, logins. See QR code phishing |
| Spear phishing | Email, messages | Specific people | Access, data. See spear phishing |
| Whaling | Email, calls | Executives | Payments, sensitive data. See whaling |
| Business email compromise | Email from real or fake accounts | Finance and staff | Payments to criminal accounts. See BEC |
| Clone phishing | Copied real emails | Previous recipients | Clicks on swapped links. See clone phishing |
| Callback phishing | Email with a phone number | Everyone | Remote access, payments. See callback phishing |
| Consent phishing | App permission requests | Work account users | Access to mail and files. See consent phishing |
| Angler phishing | Social media replies | People complaining publicly | Logins, card details |
What they have in common
- They pretend to be someone you trust.
- They create urgency, fear or excitement.
- They ask you to act: click, open, call, pay, share or approve.
One habit that defeats them all
Verify through a channel you choose. Open the app, type the web address, or call the number you already know. Never use the link, attachment or number in the message.
Got a message you cannot place? Paste it into CyberWatch AI Scan for a free check.
For more, read our complete guide to phishing.
Frequently asked questions
Which type of phishing is most common?
Bulk email and text message phishing are the most widespread, because they are cheap to send to huge numbers of people.
Which type is most dangerous?
Targeted attacks such as spear phishing and business email compromise often cause the largest losses, because they are tailored and aimed at people who handle money or access.
Does the same defence work for all types?
Largely yes: pause, verify through a channel you choose, and never share codes or passwords because a message asked.
Sources
- Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission
- Recognize and Report Phishing, US Cybersecurity and Infrastructure Security Agency
