Different methods of social engineering 

Phone calls – Misleading calls designed to gain personal information such as your identity or financial information. 

Phishing – The attacker uses messages sent by email, social media or other instant messaging clients to obtain sensitive information or by getting victims to click a link to a malicious website. 

Shoulder surfing – This is often underestimated as a threat but shoulder surfing is a simple method for spying on unsuspecting victims to collect personal data like passwords. 

Social Engineering Attacks | PeoplesBank