What it is
Social engineering is tricking people into doing something they shouldn’t - like clicking a link, sharing a code, or paying a fake invoice. Instead of hacking computers, attackers hack trust with stories that feel urgent, helpful, or scary. It targets individuals and crowds alike.
Why it matters
One convincing message can beat strong passwords and fancy tech. A well-timed call or DM can lead to stolen logins, emptied accounts, or malware on a device.
How it works
-
Pretext: attacker invents a role or problem (bank agent, delivery issue, prize).
-
Emotion: urgency, fear, curiosity, or kindness to rush your decision.
-
Action: click a link, open a file, share a code, pay a bill, install an app.
-
Payoff: stolen data, access to accounts, or a foothold in a company.
Red flags
-
Pressure to act now or keep a secret.
-
Requests for one-time codes, passwords, or payment by gift cards/crypto.
-
Links or attachments from unknown or lookalike senders.
-
Messages that don’t match how a real company contacts you.
Do it right
-
Slow down. Verify through a trusted channel you choose (official app, known number, in-person).
-
Never share 2FA codes or passwords. Real staff won’t ask.
-
Type the website yourself instead of tapping unexpected links.
-
Use MFA and a password manager so stolen passwords are less useful.
-
If you slipped up, change passwords from a clean device and tell Support or your bank fast.