The psychology every scam runs on — authority, urgency, trust and pretexting — and the one verification habit that interrupts all of them.
9 guides
Social engineering is manipulating a person into doing something against their own interest. It is the common ancestor of phishing, impersonation, romance scams and fraud calls, and it works on a small number of predictable psychological levers.
Every scam depends on one unverified assumption about who you are dealing with. Verification is not a skill for spotting liars - it is a habit of confirming identity through a channel the other person does not control.
Social media was the costliest way for scammers to reach people in 2025, with $2.1 billion in reported losses. The fake profile is the shared foundation - and once you know how they are built, they stop being convincing.
Voice cloning has removed the one thing that made a phone call trustworthy. You can no longer verify a person by how they sound, which means verification has to move to something the caller cannot control - and that turns out to be simple.
Pretexting is the invented scenario that makes a request seem reasonable. It is the part of a scam that happens before any message is sent, it is illegal in several forms, and it explains why the best attacks ask for nothing at first.
Almost every scam contains a deadline, and the deadline is rarely about the story. It is there to remove the interval in which you would have checked — which is the only interval that matters.
A caller says they are the police, the tax office or immigration, and that you must pay now or face arrest, deportation or a fine. Here is how to tell within seconds whether the call is real, and what to do instead of paying.
If someone you met online feels off - won't video call, moves too fast, or the story doesn't add up - here is how to check who you are really talking to, and the warning signs that actually hold up once you know where to look.
A call, text or email claims to be your bank, a government agency, a delivery firm or even a relative - and something about it feels off. Here is the one check that verifies who is really contacting you, and the requests that are always fraudulent, no matter how convincing the rest sounds.