Which scenario illustrates social engineering by a fraudster?

Which scenario illustrates social engineering by a fraudster?

• A. Fraudster calls a company employee and requests sensitive information while claiming to be a coworker whose systems are down
• B. Fraudster has lunch at a restaurant where a target company's employees are known to eat with the intention of overhearing sensitive conversations
• C. Fraudster without an employee badge gains access to a secure facility by following legitimate employees who are oblivious to the fraudster's presence
• D. None of the above

Answer: (A)

Social engineering is about manipulating people into revealing confidential information or granting access by using deception and a believable pretext rather than breaking in through technical means. In this scenario, the fraudster pretends to be a coworker whose systems are down and directly asks an employee for sensitive information. The pretext exploits trust in a familiar relationship and creates urgency, making the target more likely to disclose data or help without going through proper verification. That human-focused manipulation is the defining feature of social engineering. The other situations involve different tactics. One is simply overhearing conversations, which is more about surveillance than actively persuading someone to reveal information. The other involves following legitimate employees to catch a ride into a secure area, which is a physical security breach (tailgating) rather than a deception-based request for information. None of those rely on posing as someone trusted to obtain data, so they’re not the same as social engineering.

Social engineering is about manipulating people into revealing confidential information or granting access by using deception and a believable pretext rather than breaking in through technical means. In this scenario, the fraudster pretends to be a coworker whose systems are down and directly asks an employee for sensitive information. The pretext exploits trust in a familiar relationship and creates urgency, making the target more likely to disclose data or help without going through proper verification. That human-focused manipulation is the defining feature of social engineering.

The other situations involve different tactics. One is simply overhearing conversations, which is more about surveillance than actively persuading someone to reveal information. The other involves following legitimate employees to catch a ride into a secure area, which is a physical security breach (tailgating) rather than a deception-based request for information. None of those rely on posing as someone trusted to obtain data, so they’re not the same as social engineering.