Creates time pressure so victims act without thinking. Bypasses rational decision-making by triggering panic.
"Your account will be permanently suspended in 24 hours. Verify immediately to avoid losing access."
Impersonates a trusted figure — CEO, IT department, bank, government. People comply with authority without questioning.
"This is the IT Security team. Your password has been compromised. Click here to reset it now."
Threatens negative consequences — account deletion, legal action, virus infection. Fear narrows focus and impairs judgment.
"We've detected unauthorized access from Russia. Your files may be at risk. Secure your account now."
Offers prizes, job opportunities, refunds, or unexpected winnings. If it sounds too good to be true — it is.
"Congratulations! You've been selected for a $500 Amazon gift card. Claim in the next 10 minutes."
Claims others have already taken the action. Creates a sense that the behavior is normal and expected.
"12,000 employees have already verified their details. You are one of the last remaining. Complete now."
Uses personal details scraped from LinkedIn, social media, or data breaches to appear legitimate and trustworthy.
"Hi [your real name], following up on your application to [company you follow on LinkedIn]..."
🎯 Spot the Tactic — Quick Quiz
1. "Your Microsoft 365 subscription expires TODAY. Click to renew and avoid losing all your emails."
✓ Correct — "expires TODAY" is urgency, "losing all emails" is fear. Double pressure tactic.
2. "Dear [Your Name], I'm the CFO. Please process this wire transfer urgently — I'm in a meeting and can't be reached by phone."
✓ Correct — This is "CEO fraud" / BEC (Business Email Compromise). Authority + urgency + isolation (can't verify by phone).
3. "Hi Sarah — saw your profile on LinkedIn. We'd like to offer you a remote role at $120k. Just submit your CV and ID to verify eligibility."
✓ Correct — Uses your real name/profile (familiarity), attractive offer (greed), then harvests ID documents.