Social engineering means manipulating a person instead of breaking a computer system directly. The attacker convinces someone to open the door, approve access, share information, or send money.
Does this affect you?
Use this for phone calls, texts, emails, social media messages, workplace requests, in-person interactions, and any situation where someone pressures you to trust them quickly.
How social engineering works
Most scams use one or more of these tactics underneath.
- The attacker impersonates someone you might trust or obey, such as a bank, boss, family member, tech support agent, government agency, delivery company, or coworker.
- They create urgency, fear, excitement, guilt, or authority pressure so you act before verifying.
- They exploit normal instincts: helping others, avoiding trouble, respecting authority, protecting loved ones, or not wanting to seem rude.
- They may use real information from social media, public records, data brokers, or breaches to sound credible.
- The interaction ends with a specific ask: click a link, share a code, buy gift cards, send a wire, open a file, install remote access, or reveal a password.
Common forms
The channel changes; the manipulation is the same.
- Phishing uses fake emails or messages.
- Smishing uses text messages.
- Vishing uses phone calls or voicemails.
- Pretexting invents a believable story, such as IT support needing access.
- Baiting offers something tempting, such as a free prize, download, or planted USB drive.
More control
Pause on urgency plus a request
When a message creates pressure and asks for money, information, login codes, or access, stop and verify through a route you choose.
Use known contact paths
Call the person or company using a number from an official website, card, bill, or saved contact. Do not use links or phone numbers supplied in the suspicious message.
It can happen anywhere
Businesses, families, schools, and individuals are all targets. Technical skill helps, but emotional pressure can catch anyone in the wrong moment.
Sources
- CISA – Avoiding Social Engineering and Phishing Attacks (2025)
- FTC Consumer Advice – How to Recognize and Avoid Phishing Scams (2025)
- FBI – Common Scams and Crimes: Social Engineering (2025)