Social Engineering

Examples of social engineering include phishing emails or phone calls where the attacker poses as a trustworthy entity or person to trick the victim into revealing their login credentials or other sensitive information, or alternatively where the attacker fabricates a story to gain the victim's trust and send money to what turns out to be a fraudulent account.

The bad actors will often impersonate a senior executive to pressure the victim into the action. To protect against social engineering attacks, it is important to be aware of the tactics used by bad actors, exercise caution when providing sensitive information, and maintain a robust risk management and insurance program.

Social Engineering coverage is found in Cyber and Crime insurance policies.