Social engineering is a way of gaining personal information by deception. This method commonly uses telephones or the Internet, exploiting the gullibility by masquerading as a trustworthy business or institution.