Inventing a believable backstory or role to justify a request and lower the target's defenses.
Pretexting is the fabricated context a scammer builds before the ask — “I'm from IT and need to verify your login,” “I'm your new manager onboarding you.” The plausible story makes the eventual request feel routine.
A convincing pretext is why victims comply; scrutinize the story, not just the request.
Frequently asked questions
How is pretexting different from phishing?
Pretexting is the believable scenario an attacker constructs; phishing is often the delivery method. A phishing email may use a pretext (“your account needs verification”) to justify why you should click.