JAMES · LINTON
BETWEEN ASK & DO
Human behaviour / Social engineeringField note 001

The story
before the click.

The best lures do not look alien. They feel like the next line in a story you already believe.

They borrow a relationship. Match a familiar pattern. Then place one small action exactly where you expect it to be.

Follow the lure
HR
People team · 9:41Your annual salary review is ready.
A familiar sender. A plausible moment.There is just one thing to do next.
ASKDO
REVIEW & SIGN

A lure succeeds when the action feels like the natural ending.

Scammers rarely invent trust.
They inherit it.

Trust accumulates quietly: in the app you use every day, the colleague who normally writes, the process you have completed before, the tone that sounds about right.

A lure only has to remain consistent with enough of that history. The mind completes the rest.

Not tricks. Human situations.

Open each story to see what the lure borrows—and what it quietly takes away.

01AuthorityThe favour from the CEO
“I’m tied up in a meeting. Can you pick up two gift cards for a client?”

The message does not need to prove authority. Your relationship with the role has already done that work.

It borrows
Hierarchy, helpfulness and the cost of appearing obstructive.
It steals
Your permission to pause, question and verify.
Protect the task
Move the request into a known channel and confirm it there.
02FearThe payment you didn’t make
“£2,000 has left your account. If this wasn’t you, cancel it now.”

A believable emergency arrives with its own solution. The danger and the button are placed side by side.

It borrows
Your bank’s duty of care and your instinct to stop a loss.
It steals
The route you would normally use to check your account.
Protect the task
Close the message. Open the bank app or call a trusted number.
03CuriosityThe document you should know about
“Please sign this NDA. I’ll brief you on the project later.”

The gap in your knowledge becomes the reason to click. It feels easier to assume you missed a conversation than challenge the premise.

It borrows
Collaboration, memory and the expectation that work moves quickly.
It steals
Your right to ask what project, which document and why now.
Protect the task
Ask the named colleague about the document before opening it.
04GainThe pay rise waiting inside
“Your increase is confirmed. Sign in to review the new amount.”

Good news narrows attention too. The missing number creates anticipation; the promise may already be solving a worry in your life.

It borrows
Hope, recognition and the familiar rhythm of an annual review.
It steals
The separation between wanting something and verifying it.
Protect the task
Visit the HR portal independently or ask your HR contact.

Believability lives in the relationships between details.

One familiar element is not enough. The power comes when several cues agree with each other and with your life.

THIS FEELSTRUE
01The medium

It arrives where real work already happens.

02The identity

It wears a role, service or person you recognise.

03The timing

It lands near a deadline, event, worry or routine.

04The language

It sounds close enough to the messages around it.

05The ask

It resembles something you might genuinely be asked to do.

01Perceived safety“This channel is normal.”
+
02Authentic history“Messages like this were real before.”
+
03Relevance“This matters to me, now.”
+
04Plausibility“This could reasonably happen.”
05Contradiction“Nothing breaks the story.”
=
TRUST

The equation is not a forensic test. It is a way to notice how much of your confidence comes from context the sender did not have to earn.

The lure takes something before it takes data.

It takes the next step you were already prepared to make—and redirects it. That is why “spot the bad email” is too small a lesson.

EXPECTATION / RECEIPT09:41:22
  • Known relationshipBORROWED
  • Normal work processBORROWED
  • Need to be helpfulAMPLIFIED
  • Fear of delayAMPLIFIED
  • Safe next stepREPLACED
TOTALACTION

Thank you for acting exactly as expected.

This is not gullibility.
It is compression.

Inbox autopilot is how people survive hundreds of small decisions. Familiar patterns let us move without rebuilding reality every time a message arrives.

The same traits that make work possible—trust, helpfulness, speed, curiosity and respect for authority—also create openings. Better protection meets people there. It does not shame them for being human.

Keep the task.
Change the route.

You do not need to solve the sender. Put a small break between the story you were given and the action it requests.

  1. 01Name the ask

    What, precisely, is this message asking you to do?

  2. 02Notice the pressure

    Which relationship, emotion or consequence is making delay feel expensive?

  3. 03Reroute the do

    Complete the real task through the app, person or process you already trust.

ASK
THIS IS YOURS
DO