Social Engineering Red Flags in Unsolicited Communication
Social engineering attacks rely on psychological manipulation rather than technical intrusion. They arrive unsolicited — as emails, phone calls, text messages, or direct messages — and are designed to override
Phishing is an online scam where someone pretends to be a real company or trusted person. It usually happens through emails, text messages, or online messages. The scammer tries to scare or rush you by saying there is a problem with your account or that you must act immediately. They want you to click a link or share personal information such as passwords, bank details, or security codes. If you believe the message, your account can be hacked or your money can be stolen. The safest approach is to ignore unexpected messages and check the official website directly instead of using the link provided.
Vishing is a phone-call scam. Someone calls you and pretends to be from a bank, government office, delivery company, or technical support. They sound professional and often create fear or urgency by saying there is a problem with your account, money, or identity. The caller then asks for personal information such as passwords, card details, or one-time codes. Their aim is to steal your money or take control of your accounts. Real organisations do not ask for sensitive information over the phone, so the safest action is to hang up and contact the organisation directly using an official number.
Smishing is a scam done through text messages (SMS). You receive a message that looks like it comes from a real company, such as a bank, delivery service, or online platform. The message usually says something urgent, like a problem with your account or a missed delivery, and includes a link or asks you to reply. The goal is to trick you into clicking the link or sharing personal information such as passwords, card details, or security codes. If you respond, your account or money can be stolen. The safest action is to ignore the message, avoid clicking links, and check the official website or app instead.