Glossary

Pretexting

Pretexting is lying with a plan. An attacker might pretend to be IT support needing your password, or an auditor requiring financial records. They build a believable story to get what they want. The more convincing the story, the more likely you'll fall for it.

What is Pretexting?

A social engineering technique where attackers create a fabricated scenario (pretext) to engage victims and extract information or manipulate them into performing actions.

Why Should You Care?

Understanding pretexting is essential for building a strong security posture. This knowledge helps organizations identify threats early and respond appropriately.

Is your business exposed?

Real-World Example

Security teams regularly encounter pretexting in their day-to-day operations. Recognizing and responding to these scenarios is a core security competency.

How to Protect Against Pretexting

  1. 1.

    Verify identities through independent channels

  2. 2.

    Create verification procedures for sensitive requests

  3. 3.

    Train employees on pretexting tactics

Related Terms

Social Engineering, Phishing, Business Email Compromise

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required

Privacy PolicyYour Privacy Choices