Social engineering
Social engineering is the craft of manipulating people instead of hacking systems. Scammers play on human tendencies, trust in authority, fear of loss, the urge to help, or plain urgency, to coax someone into revealing information, granting access, or making a payment. It leans far less on technology than on pressure and persuasion. At their core, nearly all phishing, vishing, and impersonation scams rest on social engineering.
How we check this: Written and reviewed by the Hunch team; recognition signs reflect how the FTC/FBI describe this scam. · Last reviewed: 2026-08
Check a suspicious message now
Example
A caller pretends to be IT support, says your account is compromised, and calmly walks you through 'securing' it, which really means reading out your password or installing a remote-access tool. The friendly, helpful tone is the manipulation.
How to recognize it
- An appeal to authority, fear, urgency, or your willingness to help
- A request that would normally require verification but is framed as an exception
- Emotional pressure that discourages you from pausing or checking
- A stranger who quickly establishes trust and then asks for access or money
How Hunch flags it
Hunch keys on the observable signal categories that manipulation produces in a message, urgency, requests for credentials or payment, and impersonation via lookalike domains, rather than judging the persuasion itself.
FAQ
What is social engineering in simple terms?
Tricking a person into doing something unsafe by manipulating their emotions and trust, instead of attacking technology directly.
Why does social engineering work on smart people?
It targets normal human reactions like helpfulness and fear of loss, and it usually strikes when you're busy or stressed, so intelligence alone isn't a defense.
What's the best defense against it?
Slow down and verify independently. A quick pause to check a request through a known, separate channel neutralizes most social-engineering pressure.