Social engineering

Social engineering is tricking people, not machines, into giving away secrets or money, by using fear, hurry, trust or greed.

Social engineering: Social engineering is the art of manipulating people into doing something that helps an attacker, such as sharing an OTP, installing an app or sending money. It aims at human feelings like fear, urgency, trust, curiosity and greed, not at technical flaws.

Most scams you hear about in India are social engineering: a caller claiming to be from the bank, a prize message, a job offer needing a fee, a fake police warning. The attacker researches a little, builds a story and then pushes you to act before you can think or speak to someone else. Attackers also use authority, such as a uniform voice, a legal notice or a senior name, to stop people questioning.

Defences are habits, not software. Pause when something is urgent. Never share OTPs, PINs or passwords. Check using a different channel, such as the official app. Talk to a family member before sending a large amount. A request that insists on secrecy is almost always a trap. Each of these is a cue for you to slow down. Teach children and parents about this too, since they are often the first to be targeted.

Tips

• Pause for a minute whenever a message or call demands urgent action.
• Check claims through the official app or the number on your card, never through the caller.
• Talk to someone you trust before sending money, especially when told to keep it secret.

Related terms