What is Pretexting?
Pretexting is a social engineering technique in which the attacker tells a prepared story (the pretext): a new colleague, an auditor, a courier or an IT technician. The story exists to make the request seem logical and harmless.
Pretexting often runs in several steps: harmless questions first, then trust, then the request. It happens by phone, by email and in person, including at the office door.
How to spot it
- A stranger who knows a lot about your company
- A request to be let into the office or handed a document
What to do
- Verify identity through an official route
- Visitors enter only after being signed in
Related courses
- Social engineeringSocial engineering techniques and defence: verifying calls, emails and identities, and checking links.
- Conversation securityWhat counts as oversharing, how information is coaxed out of people and how to say no politely.
- Physical securityAccess control, protecting the workplace and devices, document destruction and awareness.
Terms on this topic
Start with your team's risk baseline
15-30 employees, one phishing simulation and a one-page report for management. No annual commitment.