[johnpapi21]

How paranoid should we be?

To the point of ensuring a safe and secure environment In all facets of our social engineering activities and behavior.

Agreed - that was the motivation behind creating this topic. If this forum, and your SE blog, highlight the relative low risk of SE while also pointing out the few practices that do legally trip up those in the field, it will welcome more into the community and increase the success rate of those who have joined.

Love your work Mothered!

---

If you ask me these are pretty general questions and it depends on the individual company.

Personally, I would want to experience all these eventualities in practice. Because often it's just unnecessary thoughts that distract us from actually doing something. As long as we stay under the radar and don't exaggerate, we're just normal people who want a refund.

Here is an example -

A user has SE'd company A twice - once with FTID, once with an EB return. Both times, the user has to contact the company to report the issue, and initiate the new product being shipped to them.

Should the user call from two different phone lines? Should the user be concerned about calling the company twice? Should the user use a new drop address for their next (third) attempt?

I see a lot of bravado on here which I applaud but intelligence caution is what I'm trying to cultivate.