What is social engineering in simple terms?

It's when someone tricks you into giving away information or doing something you shouldn't — by pretending to be trustworthy rather than by hacking your computer.

Are small businesses really targeted by social engineering attacks?

Yes. Smaller organisations are often targeted because they may have fewer formal processes and less dedicated security support, making it easier for an attacker to find a way in.

What is the most common type of social engineering attack?

Phishing is the most widespread. It usually arrives as an email designed to look like it's from a bank, supplier, or colleague, with the aim of getting you to hand over login details or make a payment.

Pretexting is when an attacker invents a believable story — such as posing as a bank employee or IT support — to earn your trust and persuade you to share sensitive information.

How does multi-factor authentication help against social engineering?

Even if an attacker tricks someone into revealing their password, MFA means they also need a second piece of verification — like a code sent to a phone — before they can get in. That extra step stops many attacks in their tracks.

What are the warning signs of a social engineering attempt?

Watch out for unexpected urgency, requests for passwords or payment details out of the blue, unsolicited attachments or links, offers that seem too good to be true, and pressure to skip your normal approval steps.

What should I do if I think my business has been targeted?

Don't panic. Stop the interaction, don't share any further information, and report it to whoever handles security in your business. If financial details were involved, contact your bank promptly. Document what happened so you can review your processes afterwards.

BusinessThreats & incidentsFocused ArticlesIntermediateProtect Your Business

Social Engineering: What It Is and How to Protect Your Small Business

Published 2 May 2026 · 3 min read · by Alex Stevens

Social engineering tricks people rather than computers — and small businesses are a common target. Here's what to look out for and how to stay protected.

Continue with Business

This article is included in our Business plans.

See plans Sign in