The psychological levers attackers pull

Almost every social engineering attack leans on one or more of five emotional levers. Learn to recognise the feeling, and you will spot the attack, even when the message itself looks flawless.

Urgency

"Your account will be suspended in 24 hours." "The payment must go today." Urgency is the attacker's favourite tool because it is designed to stop you thinking. A genuine organisation rarely needs you to act within minutes, and a genuine colleague will not mind you taking ten minutes to check. When a message makes you feel rushed, that feeling is itself a red flag.

Authority

Messages that appear to come from your CEO, your bank, HMRC, the police, or IT support borrow the weight of the sender to push you into compliance. We are conditioned not to question authority, and attackers know it. Remember that authority is trivially easy to fake in an email or a phone call.

Fear

"Suspicious activity has been detected on your account." "You have been recorded on camera." Fear narrows your focus to making the threat go away, which is exactly what the attacker wants, because the way to make it go away is always to click their link or follow their instructions.

Curiosity

An unexpected invoice, a shared document titled "Salary review 2026", a voicemail attachment, a package you did not order. Curiosity gets people to open things they would otherwise ignore. If you were not expecting it, treat it with suspicion, however interesting it looks.

Trust

The most powerful lever of all. Attackers impersonate brands you use every day, colleagues you like, and suppliers you have worked with for years. Some go further and compromise a real account, so the malicious email genuinely does come from your contact's address. Trust the person, by all means, but verify the request, especially when it involves money, credentials, or sensitive data.

The common thread is emotional pressure. When any message provokes a strong feeling and asks you to act, slow down. Acting on emotion is precisely the behaviour the attack was built around.