Why this matters
Social engineering is the art of manipulating people instead of hacking systems. Rather than breaking through security, the fraudster convinces you to open the door — to share a code, approve a payment, or grant access — by playing on trust and emotion.
It's behind most successful scams, because it targets human instincts that are hard to switch off. The best protection isn't technical; it's recognising the manipulation as it happens.
The psychological triggers scammers use
Fraudsters lean on a small set of powerful triggers:
Authority — pretending to be your bank, the police, a tax office, or a manager, because we're trained to comply with authority.
Urgency — creating a ticking clock so you act before you think.
Fear — threatening account closure, fines, arrest, or loss of money.
Trust and familiarity — posing as a friend, relative, colleague, or a brand you use.
Greed or opportunity — dangling a prize, refund, or "amazing" investment.
Helpfulness — exploiting your instinct to assist someone who seems in trouble.
When you notice one of these being used to rush you, treat it as a warning sign in itself.
How a social engineering attack unfolds
Research. The scammer gathers details about you — from social media, a data breach, or an earlier scam.
Contact. They reach out posing as someone credible, using those details to sound legitimate.
Pressure. They build a story with urgency and emotion so you don't stop to verify.
The ask. They request the real target: a code, a password, a payment, or access to your device.
The exit. Once they have it, they disappear — often before you realise anything is wrong.
Common social engineering scenarios
The "bank security" call. "We've spotted fraud on your account — to protect it, move your money to a safe account." (There is no such thing as a safe account.)
The "friend in trouble" message. A contact — or a cloned account — urgently needs money and can't talk properly.
The "tech support" contact. Someone offers to fix a problem you didn't report, then asks to install remote-access software.
The "official" threat. A "tax office" or "police" call demanding immediate payment to avoid arrest or a fine.
The "new romance" or "new friend." A relationship built quickly online that leads toward money or an investment. → See: Romance & Trust-Based Scams
How to protect yourself
Slow the conversation down. Manipulation needs momentum. Pausing breaks it.
Verify identity independently. Hang up and call back on an official number, or ask us in the app chat. Don't rely on the contact details the other person gives you.
Never share codes, passwords, or PINs — no matter how convincing the story.
Don't grant remote access or install apps at someone's request over a call or chat.
Be cautious with what you share publicly — the less fraudsters know about you, the harder you are to manipulate. → See: Protecting Your Personal Data Online
Accept that anyone can be targeted. Falling for a well-crafted scam isn't a sign of carelessness — awareness is the defence.
A simple rule
If someone contacts you and creates pressure to share information or send money, stop and verify through a channel you trust. Real organisations expect you to check — only scammers need you to act before you think.
What to do if you were manipulated
Stop all contact with the person and don't send anything further.
If you shared a password or code, change it.
If you sent money or granted access, contact us immediately through the in-app support chat.
Report what happened so we can help others avoid the same trap.
→ See: I Think I've Been Scammed: Immediate Steps