Social engineering is the broad category of attacks that manipulate human psychology — trust, urgency, authority, fear, or curiosity — to achieve an outcome a technical attack alone couldn’t. Every specific attack type on this page (phishing, spear phishing, CEO fraud, business email compromise, deepfake impersonation) is a form of social engineering.

**How It Works:**
Social engineering exploits predictable human responses to specific triggers: authority (an apparent request from a senior figure), urgency (an artificial deadline), and social proof (everyone else already did this). Understanding these underlying triggers — not just memorizing individual attack examples — is what actually builds durable resistance.

**Real-World Pattern:**
Nearly every major breach in recent memory has a social engineering component somewhere in its chain of events — not because organizations lack technical defenses, but because a well-executed social engineering attack routes around them entirely by convincing a person to open the door voluntarily.

**How ProtectYourData Defends Against It:**
The platform’s adaptive curriculum is organized around the underlying psychological triggers, not just a list of attack types — teaching learners to recognize the manipulation pattern itself, which transfers to new attack variations the specific training didn’t anticipate.

**Related Simulation:** AI-Assisted Social Engineering Simulation