What is Social engineering?
Manipulating people — rather than hacking machines — into giving up information or access, using trust, fear, or urgency.
Most successful attacks start with social engineering, not code: a call from 'the bank's fraud team', an email from 'the boss', a technician who 'needs your password'. The defences are habits, not software: slow down when someone creates urgency, verify identities through channels you find yourself, and remember that legitimate organisations never ask for passwords or one-time codes.