Authority
In plain terms
The other person presents themselves as someone you don't argue with: the bank, the government, the police, management. You obey before checking who is speaking.
Definition
Authority is borrowing an institutional or hierarchical position in order to get something done quickly and to make checking socially costly.
Why it works
We constantly delegate our judgment to roles, and that works: asking every person for proof would make life unbearable. The attacker borrows that shortcut. Their added advantage is that checking an authority seems rude or suspicious — the brake is not cognitive but social, which makes it harder to overcome than an ordinary doubt. The markers of authority, meanwhile, can all be copied: a logo, a tone, a displayed number, an address.
What resists it
Make checking impersonal to take the social weight out of it: “I'll call you back on the official number” accuses no one and needs no justification. A real authority always accepts being called back — that is even the one thing that sets it apart from a borrowed one.
The question to ask yourself
“Am I hesitating because it's doubtful, or because I don't dare ask?”
The 25 attacks that exploit it
- Malicious chatbot
- Extortion following a data breach
- Two-factor authentication bypass
- Deepfake video call
- Deepfake video
- Account recovery hijacking
- SIM swapping
- Fake traffic fine
- Fake invoice
- Fake browser update
- Fake government official
- Fake bank advisor
- Fake wire transfer order (CEO fraud)
- AI-generated fake news site
- Fake tech support
- Fake bank details change
- ID document fraud
- AI-generated phishing
- Phishing
- Pretexting (fabricated scenario)
- Scareware
- Smishing (SMS phishing)
- Identity impersonation
- Vishing (voice phishing)
- Identity theft
Other levers · Last updated: 2026-09-02.