Social Engineering exploits human psychology rather than technical vulnerabilities through tactics such as phishing emails, impersonation calls, pretexting, or deceptive interactions. Social engineering can lead to unauthorised access, fraudulent transactions, or data breaches. Cyber insurance coverage for social engineering losses often requires specific policy extensions and may have sub-limits, additional control requirements, or heightened claims documentation.