Study for the Certified Bank Secrecy Act Professional Test. Use flashcards and multiple-choice questions with hints and explanations. Get exam ready!

Multiple Choice

Which term describes the tactic of planning fraudulent activity by first gaining trust?

Gaining trust first is a classic social engineering approach. By establishing credibility and rapport, the attacker lowers the target’s natural defenses, making it more likely that they will disclose sensitive information, share credentials, or take action that facilitates fraud. This is exactly what trust exploitation describes: manipulating someone’s trust to enable fraudulent activity. The attacker might pose as a familiar colleague, vendor, or bank representative, offer a plausible reason for their request, and create a sense of urgency or authority to push the target toward a decision that benefits the fraudster. This differs from an innocuous message, which would be neutral and not aimed at creating trust for wrongdoing, and from terms that describe who might be involved rather than the tactic. While other phrases may exist, they don’t capture the core tactic of manipulating trust to plan and execute fraud as clearly as trust exploitation.

Gaining trust first is a classic social engineering approach. By establishing credibility and rapport, the attacker lowers the target’s natural defenses, making it more likely that they will disclose sensitive information, share credentials, or take action that facilitates fraud. This is exactly what trust exploitation describes: manipulating someone’s trust to enable fraudulent activity. The attacker might pose as a familiar colleague, vendor, or bank representative, offer a plausible reason for their request, and create a sense of urgency or authority to push the target toward a decision that benefits the fraudster.

This differs from an innocuous message, which would be neutral and not aimed at creating trust for wrongdoing, and from terms that describe who might be involved rather than the tactic. While other phrases may exist, they don’t capture the core tactic of manipulating trust to plan and execute fraud as clearly as trust exploitation.