DivisionCero
Responding to a Social Engineering Attack

Immediate Reporting and Containment

Reporting quickly limits the damage

The time between falling for a scam and reporting it is often the factor that most determines the final damage: a card blocked five minutes later prevents charges that one blocked the next day can no longer stop. Reporting immediately, whether to the bank, the company's security area or the affected platform, makes it possible to start containment before the attacker uses the information obtained on other related systems or accounts. Many organizations have a specific, fast channel for this type of report, and knowing it in advance, before you need it, saves critical minutes. Reporting shouldn't be postponed while waiting for absolute certainty: if there's reasonable doubt that you've been the victim of a scam, it's better to over-report than to stay quiet for fear of being wrong.