How does social engineering work?
Social engineering is a method of trying to influence a person’s behavior. An attacker may pose as a familiar organization, a colleague or a support worker. The aim is to get someone to share information or take an action they would not normally take.
Look at the context of the message
A persuasive message does not always contain spelling mistakes. It may use the name of a real organization or refer to something you expect. Instead of deciding based on a single clue, ask yourself: Was I expecting this message? Can I verify the request through a channel I already know?
Time pressure is a warning sign
Phrases such as “Your account will be closed” or “Pay immediately” leave less time to think. Instead of trusting the link or phone number in the message, navigate to the organization’s website yourself.
The first step: pause and verify
- Check the source before opening unexpected links.
- Do not share passwords or verification codes through messages.
- Verify a suspicious request through an independent channel.
