Social engineering has always been about people. What is different now is the payoff. More attacks aim to move money, not just steal data. One convincing email can redirect a vendor payment, drain a treasury account, or trigger an urgent wire that never should have left the building.
This is not a side issue for Chief Information Security Officers (“CISOs”) and their teams. You are accountable for business resilience. Social engineering fraud is a business loss that often enters through security channels and then lands as a financial event. It can bypass the incident patterns your playbooks are designed to catch. It can also reveal a second issue: teams assume insurance will cover the loss, then discover the coverage picture is more complicated than expected.