Social Engineering & Manipulation
Learn how people manipulate others online to steal information or access — and how to spot their tricks before it's too late.
📍 Where you are in the curriculum: Week 5 of 12
Last week you learned to spot phishing attacks — fake messages designed to steal your information. This week, we zoom out to the bigger picture: phishing is actually just one type of social engineering, the art of hacking humans instead of computers.
Hacking People, Not Computers 🧠
You've probably heard of hackers who break into computers using fancy code. But did you know the most common type of hacking doesn't involve code at all?
It's called social engineering, and it means tricking real people into giving away information or doing something they shouldn't.
Think of it like this:
Imagine someone walks up to your school wearing a fake staff badge and says, "Hi! I'm a new teacher. Can you show me where the main office keeps the spare keys?" You might help them because they seem legit — but they're actually tricking you.
Social engineering works the same way online. CISA ↗ explains that scammers pretend to be people you trust so you'll let your guard down.
Why does it work?
Social engineers are experts at using your emotions against you:
- 😨 Fear: "Your account will be deleted in 24 hours!"
- 🤩 Excitement: "You won a free Robux gift card!"
- 🥺 Sympathy: "Please help me, I'm locked out of my account..."
- 😊 Trust: "Hey, it's me, your friend! I just got a new account."
The goal is always the same: get you to act before you think.
💡 Key Takeaway: Social engineering is about tricking people, not computers. If someone online is trying to rush you or make you emotional, slow down and think!