Technique Index
All techniques and subtechniques in the SC&MS ABCDEF lifecycle, grouped by stage.
Access (A000)
Vectors used to initiate first contact with a potential victim.
A001Email messageA002Text messageA003Phone callA004Physical mailA005In-person contactA006Messaging-service messageA007Dating-app messageA008Gaming service messageA009Social-media direct messageA010Group chat messageA011Social-media postA012Social-media commentA013Online advertisementA013.001Social-media advertisementA013.002Search-engine advertisementA013.003Display or in-app advertisementA014Online communityA014.001Forum post or commentA015Job postingA016Search-engine poisoning (SEO)A017AI answer poisoningA018QR codeA018.001Digital QR codeA018.002Physical QR codeA019Browser or system alert
Bait (B000)
Lures, offers, and alerts used to entice a victim's engagement.
B001Fraudulent transaction alertB002Account activity alertB002.001Password change requestB002.002Unusual or suspicious loginB002.003Unexpected purchase or transactionB002.004Unsolicited verification codeB002.005Account restricted, disabled, or lockedB003Late fee noticeB003.001Unpaid toll balanceB004Government or law enforcement noticeB005Purchase or transaction receiptB006Parcel or shipment notificationB007Repair or maintenance offerB008Giveaway or contestB009Free money or cryptocurrencyB009.001Lottery or lotto winningsB009.002Inheritance or estate beneficiaryB009.003Cryptocurrency airdropB009.004Cash blessingB009.005Government grant or stimulusB010Investment opportunityB011Free or discounted product or serviceB012Free downloadB012.001TV show, movie, or bookB012.002Video gameB012.003Software or applicationB013Charitable donation requestB014Mistaken identityB015Romantic interestB016Financial assistance requestB017Job opportunityB018Gamified task offerB019Marketplace activityB019.001Interested buyerB019.002Interested sellerB019.003Non-fungible token (NFT) auction offerB020Business transaction requestB020.001Invoice or payment requestB020.002Banking or payroll detail changeB021Lost or stolen fund recoveryB022Overpayment claim
Coercion (C000)
Pressure and control tactics used to compel action or maintain compliance.
C001Time pressureC001.001Deadline or countdownC001.002Overdue paymentC002False scarcityC003Emotional appealsC003.001Fear appealsC003.002Guilt appealsC003.003Obligation appealsC003.004Shame appealsC003.005Sympathy appealsC004Explicit threatsC004.001Legal threatsC004.002Physical threatsC005Blackmail or extortionC005.002Reputational blackmailC005.003SextortionC006Harassment or bombardmentC007Isolation tacticsC008SurveillanceC008.001Forced surveillanceC008.002Covert surveillance
Deception (D000)
Fabricated or manipulated artifacts used to mislead victims and make the scam believable.
D001Caller-ID spoofingD002Email header spoofingD003IVR or audio prompt spoofingD004URL or domain spoofingD005Phishing websiteD005.001Financial institutionD005.002Cryptocurrency exchangeD005.003DeFi platformD005.004Email providerD005.005Social media platformD006Fake trading platformD007Fake system alertD008Malicious downloadD009Forged document or invoiceD010Fabricated physical evidenceD011Counterfeit productD012Deepfake mediaD012.001Voice cloningD012.002Video deepfakeD012.003AI-generated imageD013Fabricated personaD014Fabricated social proofD014.001Fabricated endorsements or testimonialsD014.002Fabricated earnings proofD015Address poisoningD016Remote access tool abuseD017Fabricated organization
Exploiting Trust (E000)
Borrowed or cultivated trust used to lower a victim's skepticism.
E001Brand impersonationE002Authority impersonationE002.001Government agency impersonationE002.002Law enforcement agency impersonationE003Account provider impersonationE004Licensed professional impersonationE005Public figure impersonationE006Business partner impersonationE007Internal role impersonationE008Close relationship impersonationE008.001Family impersonationE008.002Friend impersonationE008.003Romantic partner impersonationE009Shared identity impersonationE010Fake verification indicatorE011Compromised legitimate accountE012Manufactured relationshipE012.001Romantic relationship cultivationE012.002Friendship or mentorship cultivationE013Trusted intermediary referral
Financial Gain (F000)
Methods used to extract money, assets, or other value from victims.
F001Advance-fee paymentF002Fraudulent investment depositF003Subscription trapF004Gift card paymentF005Cryptocurrency paymentF006Cash or physical paymentF007Bank or wire transferF008Account takeoverF008.001Bank account takeoverF008.002P2P account takeoverF008.003Cryptocurrency exchange account takeoverF009Cryptocurrency asset theftF009.001Seed phrase theftF009.002Rug pullF009.003Wallet drainer contractF010Ransom or extortion paymentF011Affiliate payoutF011.001Sign-up lead payoutF011.002Paid conversion payoutF012Account credential saleF013Money mule transferF014Pump-and-dump sale