← Human Risk Under Pressure: Decisions That Protect You and Your Team
The Psychology of Trust and Pressure
How Attackers Exploit Your Brain's Shortcuts The Urgency Trap — When Speed Overrides Judgment Authority, Familiarity, and the Power of Context
Real-World Attack Scenarios
Email and Messaging Attacks — Spot the Fake Voice and SMS Attacks — The Human Side of Social Engineering Multi-Stage Attacks — When Trust Is Built Over Time
Decisions and Actions That Protect
Pause, Verify, Decide — Your Personal Process What to Do When You're Not Sure Reporting Without Fear — How Early Reporting Changes Outcomes
Real-World Attack Scenarios

Multi-Stage Attacks — When Trust Is Built Over Time

Learn how attackers build trust gradually through multiple interactions before making their move.

In this lesson, you will learn to:

  • Recognize the pattern of trust-building in multi-stage attacks and identify at least one warning sign in a sequence of communications.

Multi-Stage Attacks — When Trust Is Built Over Time

This lesson examines sophisticated attacks that unfold over days or weeks. You’ll learn to recognize the pattern of trust-building and spot when a seemingly harmless conversation is actually a setup.

Trust That Builds Over Time — And the Trap That Follows

Not all attacks happen quickly. Some of the most sophisticated social-engineering attacks unfold over days, weeks, or even months. Attackers build a relationship with you first — establishing trust through a series of innocuous conversations — before they make their real request.

This is called a “long con” or business email compromise (BEC) campaign. The attacker might start by asking a simple question about a project, then follow up with a document request, then eventually ask for something sensitive or valuable. Each step feels reasonable because trust has been established incrementally.

How to protect yourself:

  • Be suspicious of any request, even from someone you’ve been talking to, if it feels out of pattern.
  • Trust your gut: if something feels slightly off, it probably is.
  • Verify significant requests through a separate, independent channel — even if you’ve spoken before.
Trust-Building Over TimeA timeline from left to right showing Step 1: Innocent contact, Step 2: Build rapport, Step 3: Establish trust, Step 4: Make request, Step 5: Attack.How Multi-Stage Attacks Build Trust1InnocentCasual contact2BuildShare interests3TrustTrust established4RequestUnusual askAttack succeedsTrust can be weaponized. Verify before trusting.
Trust-Building Over Time — A timeline showing how trust is built incrementally through multiple interactions before the attacker makes their move.
The Trust TrapA diagram showing a person building trust over time and then an attacker exploiting that trust with a request. A final panel shows a warning symbol.The Trust Trap1ContactInnocuousFirst message2BuildShared interestsFriendly exchanges3TrustYou trust themGuard is downThe RequestUnusual ask that feels normal because trust existsFamiliarity is not a guarantee of safety
The Trust Trap — A visual showing how trust built over time can be weaponized in a single request.
← Previous: Voice and SMS Attacks — The Human Side of Social Engineering Next: Pause, Verify, Decide — Your Personal Process →