Social engineering

How it works

• The attacker builds trust, borrows authority or creates urgency.
• It works over email, phone, text, social media and in person.
• Targets are the helpful ones: reception, accounting, new hires.
• The defence is a pause and a call back to a number you already had.

What can go wrong (example scenario)

A six-person property management office got a call from “the alarm company” asking for the panel code to run a test. The receptionist read it out. The office was entered that night.

How WILDCARD handles it

Phishing Training runs monthly phishing simulations, quarterly self-paced training and monthly reporting. Your team gets to fall for safe bait, learn from it, and build the reflex of pausing before trusting. Email Security filters much of it before it arrives.

• A dental office receptionist gets a call from “the software vendor” needing remote access to “fix billing”.
• A law firm's new clerk receives a text from “the senior partner” asking for a quick favour with gift cards.
• A retailer's staff let a “delivery driver” into the back room because he was carrying boxes.

Example scenario: A small accounting firm's junior staffer received a LinkedIn message from a “recruiter” who later emailed a “job description” attachment. It was malware. The firm had just started simulations, and the staffer had failed one the month before. This time she forwarded it to the owner unopened.

A question owners ask

How often does training need to happen?

Monthly simulations keep the reflex alive, and a short quarterly lesson keeps the knowledge current. A single annual session fades within weeks.