SmiShing is a type of social engineering that uses cell phone text messages to persuade victims to provide personal information such as card number, CVV2, and PINs. The text message may contain either a website address or more commonly, a phone number that connects to an automated voice response system, which then asks for personal information. Although your institution or its business partners may ask for personal information to confirm identification such as the cardholder’s name, date of birth, and/or last four digits of a social security number, you will never be asked for a CVV2 or a PIN.