An SMS and a call can also fetch credentials. Imagine that your account head received a message that INR 50,00,000 has been debited from your company's account. He/she will panic and try to solve the issue on their own. While doing this, they might click the on link integrated in the message. This can lead to the loss of sensitive payment information, login credentials or financial losses.