TL;DR: Pretexting is a social engineering technique where a scammer invents a false scenario (a pretext) to convince someone to hand over information or access they normally wouldn't. Verify any unexpected request through a separate, known channel before acting on it — call the company back, confirm with a colleague, or check with the actual department involved.
👉 Check my digital footprint — free 30-second check →
Pretexting is a social engineering technique where a scammer invents a false scenario (a pretext) to convince someone to hand over information or access they normally wouldn't.
How Pretexting Works
A scammer might pose as IT support, a new coworker, a survey taker, or a delivery driver — building a believable story to get you to reveal a password, click a link, or let them into a building or system.
Warning Signs to Watch For
An unsolicited request that requires you to "verify" information you'd normally never share, a scenario that creates urgency or plays on helpfulness, and small inconsistencies in the story if you ask follow-up questions.
How to Protect Yourself
Verify any unexpected request through a separate, known channel before acting on it — call the company back, confirm with a colleague, or check with the actual department involved.
If this looks similar to something else you've seen, it's worth reading What Is Puppy Scams? How It Works and How to Protect Yourself.
This pattern shows up elsewhere too — see What Is Quishing (QR Code Phishing)? How It Works and How to Protect Yourself.
Frequently Asked Questions
What is Pretexting?
Pretexting is a social engineering technique where a scammer invents a false scenario (a pretext) to convince someone to hand over information or access they normally wouldn't.
How does Pretexting typically work?
A scammer might pose as IT support, a new coworker, a survey taker, or a delivery driver — building a believable story to get you to reveal a password, click a link, or let them into a building or system.
What are the warning signs of Pretexting?
An unsolicited request that requires you to "verify" information you'd normally never share, a scenario that creates urgency or plays on helpfulness, and small inconsistencies in the story if you ask follow-up questions.
How can I protect myself from Pretexting?
Verify any unexpected request through a separate, known channel before acting on it — call the company back, confirm with a colleague, or check with the actual department involved.
What should I do if I think I’ve encountered Pretexting?
Stop responding immediately, do not click any links or share information, and report it to the appropriate authority. If money or personal information was already shared, act quickly to secure your accounts and report the incident.