Why it works on us
None of the attacks described on this site exploits a technical flaw on the victim's side. They exploit ordinary human reactions — and there are only a handful of them. Understanding them is worth more than memorizing a hundred pages: it is what lets you recognize a scam no one has described yet.
- UrgencyUsed by 45 attacks
You are given too little time to think. It is not a scheduling accident: the deadline is chosen so that you decide before you have been able to check.
“What actually happens if I wait an hour before doing this?”
- FearUsed by 20 attacks
You are told that something serious is happening or about to happen. Fear fills your mind, and meanwhile it is the other person who offers the solution.
“Who is telling me about this danger, and why does the solution come from the same person?”
- AuthorityUsed by 25 attacks
The other person presents themselves as someone you don't argue with: the bank, the government, the police, management. You obey before checking who is speaking.
“Am I hesitating because it's doubtful, or because I don't dare ask?”
- TrustUsed by 68 attacks
What reaches you looks like what you know: the name of someone close, your bank's logo, an almost exact address. The resemblance stands in for proof.
“Do I recognize this person, or only the signs that point to them?”
- Social pressureUsed by 16 attacks
You are put in a situation where saying no seems out of place: not helping someone close, keeping a manager waiting, letting down someone who is counting on you.
“Am I agreeing because it's justified, or because refusing would be awkward?”
- RewardUsed by 20 attacks
You are given good news: a refund, a prize, an offer. Good news doesn't trigger suspicion — which is exactly what makes it useful to the attacker.
“Why does this process need something from me if I'm the one receiving?”
- The lure of profitUsed by 6 attacks
A financial opportunity that is too good to be true, presented as reserved for those in the know. It is not greed that makes people give in: it is the fear of missing out.
“If it's so profitable and risk-free, why do they need my money?”
- CuriosityUsed by 14 attacks
A file, a link or a found object you just want to see the contents of. Looking seems harmless — and that “just looking” is all it takes.
“What does it cost me never to know what was inside?”
- ScarcityUsed by 4 attacks
Only two left, the offer ends in nine minutes, the apartment will be gone tomorrow. Announced scarcity doesn't need to be real to work: it only has to be displayed, and it serves to prevent comparison.
“Am I choosing this offer, or am I just running from the idea of missing it?”