Topic
Learn Social Engineering Defence
You cannot defend against social engineering by hoping your users won't click. You defend by understanding how attackers plan, recon, and execute, then engineering the environment so the attack cannot succeed even if a human is fooled — out-of-band verification, hardware keys, callback rules, and process redesigns that remove the single-decision failure mode. This course teaches both sides so defenders stop being surprised.
What you'll be able to do
- Map an attacker's OSINT reconnaissance stage
- Recognise vishing scripts in real time
- Design phishing-resistant workflows (out-of-band verification, hardware keys)
- Run internal red-team exercises without eroding trust
- Write incident response for social-engineering breaches
Ready to start?
Fraud Investigator DiplomaFrequently asked questions
Is this the same as CEH?
CEH is broad ethical hacking. This is deep on the social-engineering surface — planning, execution, defence, and post-incident. Complementary, not the same.
Which attacks does it cover?
Phishing, vishing, pretexting, BEC (business email compromise), MFA fatigue, callback phishing, deepfake voice fraud.
Do I need offensive experience?
No. Defenders benefit from understanding the offensive craft but you don't need to have run engagements yourself.
How long is the module?
~12 hours as a standalone topic; the fraud diploma covers it deeper as part of the investigation track.
Is deepfake voice fraud actually a thing?
Yes — and growing rapidly. The 2024 Arup case ($25M) is the reference. We cover detection and process countermeasures.
What about training my staff?
The final module covers program design: measuring click rates without punishment culture, running exercises that build capability.
Is there a certificate?
Yes — verifiable certificate on completion.
Authoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
- FBI Internet Crime Complaint Center (IC3)
Official US channel for reporting internet-enabled fraud and cybercrime.
- US Federal Trade Commission — ReportFraud
Consumer fraud reporting and published enforcement data.
- UK Action Fraud
UK national reporting centre for fraud and cybercrime.
- Canadian Anti-Fraud Centre
Canada's central repository for fraud reports and scam alerts.
