Carnegie Mellon University

Don't Fall for the Bait: Emotional Manipulation is the Scammer's New Favorite Tool

October 01, 2025

Don't Fall for the Bait: Emotional Manipulation is the Scammer's New Favorite Tool

In today's complex digital landscape, cyber criminals are focusing less on cracking technical defenses and more on exploiting a universal vulnerability: human emotion. Scammers are becoming exceptionally sneaky, using a psychological pressure point to bypass your critical thinking and prompt an immediate, costly mistake. The core of their strategy is simple: if they can make you feel a sudden, urgent emotion, they can get you to click, respond or pay before you have a chance to think.

The Dual Strategy: Fear and Excitement as Weapons

Scammers deploy messages designed to create intense emotional highs or lows, freezing your reasoning ability. Recognizing these tactics is the first step toward security:

Emotional Tactic

Examples of Scam Messages

The Goal

Posing as Positive Bait (Excitement/Greed)

"You've won a sweepstakes for an expensive prize, but you must respond in the next hour!" or "An attractive stranger wants to chat and be your friend."

To create a sense of urgency and reward, making you click a malicious link or engage in a conversation that leads to financial fraud.

Posing as a Threat (Fear/Panic)

"You owe back taxes and we're coming to collect unless you call this number immediately!" or "Your account has been hacked, and you need to pay a ransom now."

To instill immediate fear of legal or financial consequences, forcing you to comply with demands for wire transfers, gift cards or sensitive information.

This emotional manipulation is no longer limited to email. Scammers now use texts, direct messages (DMs), and even phone calls — often powered by sophisticated artificial intelligence (AI) platforms that mimic real people or institutions to make the threat feel more credible.

The "Wrong Number" Scam: A Slow-Burn Approach

A new and increasingly common scam starts with a casual, seemingly innocent message to build rapport before launching the attack. This "wrong number" or "mistaken text" scam is a patient tactic:

  • The Hook: It begins with a friendly, low-stakes text, such as: "Hey, how are you?" "Do you have any dentist recommendations?" or "It was great running into you last night."
  • The Danger: These messages are designed to engage you in a conversation that slowly leads to an investment scam (like "pig butchering" crypto schemes) or a request for personal information.
  • The Defense: Your politeness is the scammer's entry point. Do not respond — not even to say they have the wrong number. Replying simply confirms that your number is active.

How to Stay Safe: The Three-Step Rule

The moment a message causes a sudden, strong emotional reaction, pause and subject it to a quick security audit.

  1. Ask Critical Questions:
    • Is this unexpected? Did you enter a sweepstakes or expect a call from the IRS?
    • Is it requesting urgent action? Is it pushing you to click or pay immediately?
    • Does it sound too good — or too scary — to be true?
  2. Take Immediate Action:
    • Don't click anything. This includes links, attachments and the "Unsubscribe" button, which confirms your email is active.
    • Report emails as phishing using your email client's built-in reporting tool.
    • Delete the message.
    • Block the sender immediately if it arrived via text, DM or phone call.

Conclusion: Become a Master of Emotional Defense

Protecting yourself in the digital age requires strong passwords and MFA and emotional discipline. You flip the script by recognizing that urgency and high emotion are the calling cards of a scammer. You transform from a vulnerable target into a cautious, deliberate defender. Your first reaction to any alarming or exciting digital message should always be skepticism — pause, verify through an official channel, and refuse to let emotion dictate your security choices. Your critical thinking is your strongest defense.

Adapted from staysafeonline.org/cybersecurity-awareness-month