Spot the urgency.
Real requests don't usually require panic. Urgency is the most reliable manipulation tool in the social engineering playbook — and the easiest one to neutralise once you know what to look for.
Hi, I'm in back-to-back meetings all day and need an urgent payment processed before 12. Can you get this done in the next 30 mins? I'll send the details. Don't loop anyone else in — it's confidential and time-sensitive. Sarah
Authority + urgency + secrecy. Three classic pressure tactics in one message.
Urgency is engineered. Once you see the pattern, the spell breaks.
Attackers don't need you to be careless. They just need you to act before you think. Here's what their pressure usually looks like — and what you can do instead.
Pressure tactics to watch for
- "Urgent", "ASAP", "before end of day", or a specific countdown
- Authority overlay — claims to be from a director, finance, HR, or "the boss"
- "Don't loop anyone else in" or "keep this confidential between us"
- Threat of consequence — late fees, account closure, missed delivery, legal action
- Unusual channel — your CEO suddenly texting you on a personal number
- Request for gift cards, a wire transfer, or a change to bank details
What to do instead
- Treat urgency as a yellow flag, not a green light
- Verify through a second channel — phone, in-person, a known number
- Never act on bank detail changes from email alone
- If it claims to be from a colleague, ask them face-to-face or call their known number
- Real urgent requests survive a 5-minute pause; fake ones rarely do
- If you're being told to keep something quiet, that itself is a red flag
Business email compromise costs UK businesses millions every year.
Most of those losses started with one urgent message that someone wanted to deal with quickly. The fix isn't more technology — it's giving everyone in the business permission to slow down on requests involving money, access, or anything that feels just slightly off.
Continue with the other seatbelts
Book a free 15-minute cyber chat.
No sales pitch, no jargon. We'll walk through your current setup, the easy wins, and how to give your team a simple verification habit that stops most pressure attacks cold.