What is social engineering?
Social engineering is a trick aimed at a person, rather than a break-in of the technology. The aim is to get you to hand over information, money, or access. Phishing, vishing, invoice-detail changes, fake bank or police calls, and requests to approve a code are common forms. UK advice centres on slowing down, not on rushing a decision. 12345
By Secordit. Last checked: 10 November 2026.
Go to the steps · All glossary terms
How it works
- Someone contacts you and pretends to be a person or organisation you already trust. 12
- They try to create urgency or panic, then ask for information, money, access, or approval of a code. 43
- If you go along with the request, they can take money or access an account. The technology itself may not have been broken. 12
How it can look
Take Five to Stop Fraud uses three words: Stop, Challenge, Protect. It says only criminals try to rush or panic you, and it also warns that criminals may impersonate Take Five itself. If you think you have been scammed, contact your bank and report to Report Fraud, or call 0300 123 2040, as stated on Take Five. That route does not promise that money will be returned. 45
Warning signs
What to do now
- Stop. Do not follow the instruction in the unexpected contact. 4
- Challenge the request using a phone number or website you already trust, not a number or link in the message. 42
- Protect your money and accounts if anything has been shared or paid, then report the incident to Report Fraud or, in Scotland, Police Scotland. 4578
UK reporting and support
- If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 6
- For fraud or hacking in England, Wales or Northern Ireland, use Report Fraud (opens in a new tab), or call 0300 123 2040 as stated on Take Five. In Scotland, call Police Scotland on 101. 5478
- If someone is in danger, call 999. 78
How to protect yourself
- Slow down when a message or call creates urgency. Only criminals try to rush or panic you. 4
- Turn on MFA or a passkey for important accounts, and remember that some tricks still target those methods. 3
- Use a contact method you already have for your bank, supplier or family, not the details in an unexpected message. 24
Frequently asked questions
What is social engineering, and how is it different from a software hack?
Social engineering tricks a person into handing over information, money or access. A software hack targets the technology itself. Some incidents use both, but the first defence here is to slow down and check the request. 12
Is phishing a type of social engineering?
Yes. Phishing, vishing, invoice-detail changes, fake bank or police calls, and requests to approve a code are common forms. Each of those has its own glossary page for the practical steps. 132
Will I get my money back if I report a social-engineering scam?
You should still contact your bank and report the incident. Reporting does not promise that the money will be returned. 45
Matching kit
After a Scam: What to Do First · £7 · Digital download.
A printable UK checklist for the money, account and reporting steps. It is general information, not a recovery service.
General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.
News Pulse
Account security, explained by email.
Sources
- NCSC, Phishing attacks: defending your organisation | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- NCSC, Spotting cyber attacks | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- NCSC, Not all types of MFA are created equal | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Take Five to Stop Fraud, Take Five to Stop Fraud (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Report Fraud, Report Fraud (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Stop Scams UK, 159 Phone number - Stop Scams UK (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Police Scotland, How to report a crime - Police Scotland (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud (opens in a new tab). Accessed 10 November 2026 (Europe/London).

