Commonly confused

Social engineering vs Pretexting

Social engineering manipulates people. Pretexting is a story-based social engineering method that builds a false scenario.

Social engineering

Social engineering is a psychological manipulation tactic used to trick individuals into divulging sensitive information or performing actions that compromise security. Attackers exploit human trust, curiosity, or fear to bypass technical security controls. Understanding these.

Social engineering manipulates people into revealing information or performing actions that compromise security, bypassing technical defenses by exploit...

Full PathTerms™ definition

Pretexting

Pretexting is a social engineering tactic where an attacker fabricates a scenario or identity to manipulate a victim into divulging sensitive information or performing an action they otherwise wouldn't. The attacker creates a believable pretext, such as posing as IT support or a.

Pretexting is a social engineering tactic where an attacker fabricates a scenario or identity to manipulate a victim into divulging sensitive information.

Full PathTerms™ definition

Why it matters

People mix up Social engineering and Pretexting in exam questions and job posts. Knowing the difference helps you pick the right control, process, or architecture choice.

How to remember the difference

Social engineering manipulates people. Pretexting is a story-based social engineering method that builds a false scenario.

Related exam lists