The easiest system to hack has never been a computer

The People Hacker explores the psychology of cybercrime, social engineering and digital trust. I help organisations understand how attackers think and why their tactics work.

My work sits between offence and defence. I build the pretext an attacker would, then help the defenders see what it exposed: a process nobody checks, a request nobody questions, a signal that never reaches the right person.

I write regularly about what I see, from invoice fraud and QR-code lures to why the emails we trust most are the ones nobody seems to have written. The articles are on the writing page.

How I work

• Authorised only. Nothing is tested without written permission and an agreed scope.
• Proportionate. Exercises are realistic, not cruel.
• People are not the problem. Findings point to process and design, not individuals.
• Learning over scores. A click rate is a starting point, not a result.