The Psychology of Deception: How to Recognize Telephone Scams

ESET joined the all-Ukrainian campaign #ShakhraiGoodbye

Phone scams impersonating brands and retailers are a classic form of social engineering, which is becoming increasingly sophisticated in the digital age of 2026. Criminals manipulate basic human emotions: greed (in the case of fake winnings) or fear (in the case of fake loans). About this they tell specialists within the framework of the #ShakhraiGoodbye campaign.

Anatomy of manipulation: why scammers' triggers are still effective

The success of telephone scams is not based on high technology, but on psychological pressure that throws the victim off balance and blocks critical thinking. Fraudsters deliberately create an artificial shortage of time (time pressure) by using calls for immediate action. Phrases like "the promotion is only valid for the next five minutes" or "the loan is being issued right now" force a person to make impulsive decisions, guided by emotions rather than logic. When attackers report a sudden win of expensive equipment, they trigger the "easy success" trigger, lulling the alert by demanding to pay an insignificant amount for delivery, insurance or tax compared to the price of the prize.

The most dangerous scenario is the intimidation of financial losses, when the victim is informed about the alleged unauthorized execution of an installment plan or loan in a popular store. In a state of stress, a person willingly agrees to “help” from a pseudo-manager. The final goal of any of these scenarios always remains the same - to lure confidential information. The conversation inevitably boils down to attempts to find out the full details of the payment card, including the expiration date and three-digit CVV code, or the requirement to dictate one-time passwords and confirmation codes from SMS messages, which actually give attackers access to online banking or confirm the debiting of funds.

The Psychology of Deception: How to Recognize Telephone Scams

Digital immunity: a basic algorithm for protecting against social engineering

Building reliable personal cyber protection requires strict adherence to digital hygiene rules and understanding the architecture of legitimate companies:

  • End communication at the first sign of suspicion: The safest course of action when in doubt is to immediately end the call. No official representative of a major retailer or bank has the right to be offended if a customer decides to hang up for additional verification.

  • Verification through official sources: Any information about grand draws, personal discounts, or account problems should be verified exclusively by yourself. To do this, go to the company's official website, use its authorized mobile application, or call the hotline number listed on the back of your bank card or on the brand's verified website.

  • An absolute taboo on transferring authorization data: confidential codes from SMS and push notifications from banks are a digital analogue of your personal signature. They cannot be revealed to anyone - even if the person on the other end of the wire confidently gives your passport details, address, or introduces himself as the head of the security service.

Classification of danger markers during a telephone conversation

This table allows you to quickly structure suspicious signals and identify fraud attempts in a timely manner.

Script / Conversation MarkerPsychological or technical hook of scammersCorrect user reaction and action
Emergency Benefit ("Today Only")Artificially creating haste to exclude rational analysisComplete the challenge, monitor the store's official promotions section
Smartphone/Technology Pseudo-GiftRequirement to remit “tax” or “commission” before receiving a prizeIgnore the request. Legitimate companies do not take advance payments for gifts.
Pseudo-credit / Threat of losing moneyAttempting to find out CVV code or password from SMS to "cancel the transaction"Hang up, check your balance in the banking software yourself

HiTech Expert Take: Why is cyber hygiene critical in the age of AI phishing?

Phone fraud in 2026 reaches a fundamentally new level due to the active use of generative artificial intelligence by attackers. Thanks to neural network voice cloning technologies (Voice Deepfakes), fraudsters are already able to fake the voices of familiar people or well-known top managers of companies, which significantly increases the level of trust of the victim. In such realities, any voice in the receiver that requires financial actions or the transmission of codes should be subject to zero trust by default until the information is verified through alternative closed channels.

Effective countermeasures to social engineering lie in the realm of system compliance. Just as process automation eliminates the human factor and corruption risks on the frontline, so too in civilian life. use of official digital platforms completely eliminates the need for telephone approvals. If the client gets used to interacting with brands and banks exclusively through secure application interfaces, where every step is logged and verified by the system, telephone fraud as a phenomenon loses its economic feasibility for criminals.

HiTech Expert Analytical Department