Technique Index
All techniques and subtechniques in the SC&MS ABCDEF lifecycle, grouped by stage.
Access (A000)
Vectors used to initiate first contact with a potential victim.
- A001Email message
- A002Text message
- A003Phone call
- A004Physical mail
- A005In-person contact
- A006Messaging-service message
- A007Dating-app message
- A008Gaming service message
- A009Social-media direct message
- A010Group chat message
- A011Social-media post
- A012Social-media comment
- A013Online advertisement
- A013.001Social-media advertisement
- A013.002Search-engine advertisement
- A013.003Display or in-app advertisement
- A014Online community
- A014.001Forum post or comment
- A015Job posting
- A016Search-engine poisoning (SEO)
- A017AI answer poisoning
- A018QR code
- A018.001Digital QR code
- A018.002Physical QR code
- A019Browser or system alert
Bait (B000)
Lures, offers, and alerts used to entice a victim's engagement.
- B001Fraudulent transaction alert
- B002Account activity alert
- B002.001Password change request
- B002.002Unusual or suspicious login
- B002.003Unexpected purchase or transaction
- B002.004Unsolicited verification code
- B002.005Account restricted, disabled, or locked
- B003Late fee notice
- B003.001Unpaid toll balance
- B004Government or law enforcement notice
- B005Purchase or transaction receipt
- B006Parcel or shipment notification
- B007Repair or maintenance offer
- B008Giveaway or contest
- B009Free money or cryptocurrency
- B009.001Lottery or lotto winnings
- B009.002Inheritance or estate beneficiary
- B009.003Cryptocurrency airdrop
- B009.004Cash blessing
- B009.005Government grant or stimulus
- B010Investment opportunity
- B011Free or discounted product or service
- B012Free download
- B012.001TV show, movie, or book
- B012.002Video game
- B012.003Software or application
- B013Charitable donation request
- B014Mistaken identity
- B015Romantic interest
- B016Financial assistance request
- B017Job opportunity
- B018Gamified task offer
- B019Marketplace activity
- B019.001Interested buyer
- B019.002Interested seller
- B019.003Non-fungible token (NFT) auction offer
- B020Business transaction request
- B020.001Invoice or payment request
- B020.002Banking or payroll detail change
- B021Lost or stolen fund recovery
- B022Overpayment claim
Coercion (C000)
Pressure and control tactics used to compel action or maintain compliance.
- C001Time pressure
- C001.001Deadline or countdown
- C001.002Overdue payment
- C002False scarcity
- C003Emotional appeals
- C003.001Fear appeals
- C003.002Guilt appeals
- C003.003Obligation appeals
- C003.004Shame appeals
- C003.005Sympathy appeals
- C004Explicit threats
- C004.001Legal threats
- C004.002Physical threats
- C005Blackmail or extortion
- C005.002Reputational blackmail
- C005.003Sextortion
- C006Harassment or bombardment
- C007Isolation tactics
- C008Surveillance
- C008.001Forced surveillance
- C008.002Covert surveillance
Deception (D000)
Fabricated or manipulated artifacts used to mislead victims and make the scam believable.
- D001Caller-ID spoofing
- D002Email header spoofing
- D003IVR or audio prompt spoofing
- D004URL or domain spoofing
- D005Phishing website
- D005.001Financial institution
- D005.002Cryptocurrency exchange
- D005.003DeFi platform
- D005.004Email provider
- D005.005Social media platform
- D006Fake trading platform
- D007Fake system alert
- D008Malicious download
- D009Forged document or invoice
- D010Fabricated physical evidence
- D011Counterfeit product
- D012Deepfake media
- D012.001Voice cloning
- D012.002Video deepfake
- D012.003AI-generated image
- D013Fabricated persona
- D014Fabricated social proof
- D014.001Fabricated endorsements or testimonials
- D014.002Fabricated earnings proof
- D015Address poisoning
- D016Remote access tool abuse
- D017Fabricated organization
Exploiting Trust (E000)
Borrowed or cultivated trust used to lower a victim's skepticism.
- E001Brand impersonation
- E002Authority impersonation
- E002.001Government agency impersonation
- E002.002Law enforcement agency impersonation
- E003Account provider impersonation
- E004Licensed professional impersonation
- E005Public figure impersonation
- E006Business partner impersonation
- E007Internal role impersonation
- E008Close relationship impersonation
- E008.001Family impersonation
- E008.002Friend impersonation
- E008.003Romantic partner impersonation
- E009Shared identity impersonation
- E010Fake verification indicator
- E011Compromised legitimate account
- E012Manufactured relationship
- E012.001Romantic relationship cultivation
- E012.002Friendship or mentorship cultivation
- E013Trusted intermediary referral
Financial Gain (F000)
Methods used to extract money, assets, or other value from victims.
- F001Advance-fee payment
- F002Fraudulent investment deposit
- F003Subscription trap
- F004Gift card payment
- F005Cryptocurrency payment
- F006Cash or physical payment
- F007Bank or wire transfer
- F008Account takeover
- F008.001Bank account takeover
- F008.002P2P account takeover
- F008.003Cryptocurrency exchange account takeover
- F009Cryptocurrency asset theft
- F009.001Seed phrase theft
- F009.002Rug pull
- F009.003Wallet drainer contract
- F010Ransom or extortion payment
- F011Affiliate payout
- F011.001Sign-up lead payout
- F011.002Paid conversion payout
- F012Account credential sale
- F013Money mule transfer
- F014Pump-and-dump sale