MODULE 04 / 08 · HUMAN SECURITY

Social Engineering

Understand how attackers manipulate trust, urgency and human behaviour to obtain sensitive information. Learn how to recognise suspicious requests and respond safely.

What you will learn

01 · Understand Learn what social engineering means and how it works.

02 · Recognise Identify manipulation, impersonation and pressure tactics.

03 · Respond Practise protecting personal and account information.

Interactive Social Engineering Simulation

SCENARIO 01 · BEGINNER

REAL-WORLD SITUATION

A suspicious bank phone call

Imagine that you receive an unexpected phone call. The caller claims to work for your bank and says there is a security problem with your account. They attempt to pressure you into sharing confidential information.

SAMPLE PHONE CONVERSATION · TRAINING SCENARIO

INCOMING CALL

Caller: Good afternoon. I'm calling from your bank's security department.

Caller: We have detected unusual activity on your account. We need to verify your identity immediately.

Caller: To prevent your account from being blocked, please tell me your banking password.

Suspicious request: The caller is asking you to reveal your confidential banking password.

Security reminder: This is a fictional training conversation. Legitimate bank staff should not ask you to disclose your full password or other authentication secrets over an unexpected phone call.

What is the safest response?

Key takeaway

Social engineering relies on manipulating people rather than directly attacking technology. Be cautious when someone creates urgency, impersonates an authority figure or asks for confidential information. End suspicious calls and contact the organisation through an official, independently verified channel.