Documented social engineering incidents targeting the professional & business services sector, sourced and fact-checked.
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
DocumentedFraudsters faked WPP CEO Mark Read on WhatsApp and staged a Teams call with a cloned executive voice. The agency head said no. Why that matters.
DocumentedAdvance Machine Company's West Coast sales manager repeatedly rifled Tennant Company's sealed, covered dumpster in California to steal sales leads.
DocumentedA Pennsylvania shredding-business owner's 2010 qui tam suit alleged that Shred-It, Iron Mountain.
DocumentedA 12-person ring watched hacked inboxes for big payments, then redirected them with fake emails. Trial evidence put losses above $25M. Nine now convicted.
DocumentedA Costa Rica-based telemarketing ringleader used VOIP-spoofed Washington D.C. caller ID and fake government-official personas to convince hundreds of mostly elderly U.S. victims they had won sweepstakes prizes, bilking them of over $4 million before advance-fee "taxes and fees" demands. The lead defendant was convicted at trial in 2024 and sentenced to over 15 years in 2025.
Reported/allegedGreenpeace alleged in a civil suit, dismissed in both forums without any finding on the merits, that Dow Chemical and CONDEA Vista Company (bought by Sasol Ltd. in 2001 and sued as Sasol North America, Inc.) had, through two public relations firms, subcontracted the private intelligence firm Beckett Brown International to run repeated trash-collection raids on its Washington DC offices between 1998 and 2000, one subcontractor being a District of Columbia police officer engaged off duty and expected to use his badge to reach a locked trash enclosure.
DocumentedBetween 2006 and 2008 the FTC pursued six civil cases covering 16 data-broker and private-investigation defendants after two dismissals, alleging they pretexted telecom carriers to obtain and resell consumers' confidential call records. Several matters resulted in permanent injunctions and monetary judgments totaling over $1 million, while the 77 Investigations matter's disposition and collection are not established by the cited sources.
DocumentedDOJ/FTC alleged that Citizens Disability and subsidiary CD Media made 109 million-plus illegal telemarketing calls, including 25.7 million-plus to Do-Not-Call Registry numbers, using robocalls voiced by "Amber" or "Audrey" that falsely told consumers they were following up on the consumer's own SSDI eligibility inquiry.
Reported/allegedToronto firm CoHost spent two months interviewing a candidate it now believes was a fabricated persona with fake references. The warning signs.
DocumentedAn Arup employee in Hong Kong sent HK$200M (US$25.6M) after a video call where everyone else was a deepfake. How the fake meeting worked and what stops it.
DocumentedAttackers made Microsoft's own Azure Monitor send a fake $459.90 Windows Defender bill that passed SPF, DKIM and DMARC. A reviewer cleared it. How it worked.
DocumentedAir Canada admitted in a sworn Ontario Superior Court affidavit that it hired private investigators who twice took trash from outside the home of WestJet's co-founder and vice-president of strategic planning (a collection his own affidavit says involved the investigators walking onto his driveway, a claim IPSA disputed) and had shredded documents digitally reconstructed by a Houston forensic firm, as part of its corporate-espionage suit against WestJet, a fight that ended in a CAD 15.5 million WestJet settlement and public apology.
Social Engineering Examples