A phisher can operate using the phone, e-mail, text messages, Whatsapp and even apps. So make sure you never give out your personal details over the phone; official organisations will never ask you to do that.