Social engineering defense for agents: are your controls keeping up?

TL;DR: The next wave of social-engineering attacks does not distinguish between humans and AI agents, with observed agent-vs-agent calls into customer support, GEO and AEO poisoning used to spread credential-theft links, and AI personal assistants moving faster than traditional security controls, according to Doppel. Trust manipulation is now a shared identity problem across human and non-human workflows.

Editorial analysis by NHI Mgmt Group, based on content published by Doppel: “Building a Social Engineering Defense Platform to Protect Both Humans and AI Agents”.

Key questions

Q: How should security teams stop AI-powered social engineering from leading to privileged access?

A: Security teams should harden the approval path, not just the inbox.

Q: Why do AI copilots and agents increase social engineering risk in enterprise workflows?

A: They compress trust into a faster decision path.

Q: What are the signs that an AI-assisted social engineering campaign is becoming dangerous?

A: Warning signs include prolonged back and forth contact, highly tailored references to a person’s hobbies or professional life, and a gradual shift from casual conversation to requests for information or action.

Practitioner guidance

• Harden support-channel identity verification Require strong verification before any support interaction can trigger reset, escalation, or data-release actions, especially when an AI agent is involved in the conversation.
• Treat LLM-facing surfaces as a phishing domain Scan search, summarisation, and content-generation inputs for impersonation, malicious links, and credential-lure language, then block or warn before those surfaces are consumed by users or agents.
• Add pre-action controls for low-latency agents Insert policy checks before an assistant agent can process email, forward messages, or invoke downstream actions that may create fraud or credential-theft exposure.

Bottom line: Social engineering now targets both humans and AI agents, so the trust boundary has expanded beyond classic phishing awareness.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →