The Psychology of Stress: How the Scammer Takes Control of Your Logic

The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.

It was two in the afternoon, a sleepy office routine hour, when Ronit's phone buzzed on the desk. The caller ID displayed 'Customer Service – Bank Leumi'. Ronit, a 52-year-old accountant, a level-headed woman who had dealt with numbers and precision her entire life, did not hesitate to answer. 'Hello, Ronit,' said a calm, yet authoritative male voice on the other end. 'This is Alon from the Security Department. We are currently detecting an unusual withdrawal attempt of 14,500 NIS from your account at the Be'er Sheva branch. Did you perform this transaction?'

In that moment, Ronit's world narrowed down to a single point. Her heart rate accelerated, her palms began to sweat, and her ability to think about what she had eaten for lunch or the meeting she had scheduled in half an hour – vanished as if it never existed. Her brain entered a 'fight or flight' mode. This is the moment when logic gives way to survival instinct, and this is exactly the moment when the scammer wins.

In the previous chapter, we discussed the question of why smart people fall for scams. We saw that intelligence is not a vaccine against fraud. In this chapter, we will dive into the most well-oiled mechanism in the digital scammer's arsenal: the psychology of stress. We will understand how they create 'artificial urgency,' why our brain betrays us under threat, and how to analyze the legal system's approach to those moments when our judgment is impaired due to extreme manipulation.

The Anatomy of Panic: What Happens to the Brain Under Attack

To understand how scammers succeed in making normative people transfer their money to an anonymous account abroad, we must first understand the biological structure of fear. Inside our brain is a small almond-shaped gland called the amygdala. Its role is to serve as the body's 'smoke detector.' When the amygdala identifies a danger – whether it is a physical threat or a phone call from the bank reporting the theft of funds – it takes control of the system.

This process is referred to in professional literature as an 'amygdala hijack.' Once the amygdala goes into action, it may paralyze the prefrontal cortex – the part of the brain responsible for logical thinking, long-term planning, and informed decision-making. In this state, a person might not ask themselves, 'Why is the bank calling from such a number?' or 'Does it make sense that they are asking me for my secret code?'. The brain is preoccupied with only one thing: ending the threat. And the scammer, like a conductor of an orchestra, provides the (alleged) only way to do so.

Throughout his professional career, Attorney Zion Beholul has encountered diverse cases showing how scammers act as psychologists without a degree. They know that time is the enemy of the scam. If the victim were given ten minutes to think, they might call their spouse, consult a friend, or simply take a deep breath and realize something is wrong. Therefore, they create 'time pressure.' They will claim that the money is on its way out, that there is a window of only a few minutes to stop the transfer, or that if the call is disconnected, the damage cannot be undone. This pressure is intended to prevent a return to logical thinking.

The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.

The Case of Dan: When the Phone Becomes a Crime Scene

Dan (a pseudonym), a retired software engineer, sat on his balcony. Dan is a man who is not easily fooled. He understands technology and has always been careful about suspicious links. But one evening, his defenses were put to the test against a well-timed attack.

The call came in the evening. 'Hello Dan, this is Sergeant Ophir from the police's Cyber Fraud Unit,' the voice said. 'We are currently in the midst of a covert investigation against a gang that has hacked into the accounts of many clients at your bank. Your name appeared on the list of potential victims. We must act fast to protect your credit balance.'

Dan felt deep concern. 'What do I need to do?' he asked. 'First of all, do not disconnect the call,' the fake sergeant instructed. 'This is very important. If you hang up, the scammers will realize we are onto them and they will withdraw the money immediately. I am now transferring you to the bank's security representative who will work with us on a conference call.'

The call transfer sounded professional, with the bank's familiar hold music. An additional representative joined the call. 'Dan, I see suspicious access attempts here. We are going to move your money to a temporary escrow account until the breach is closed. I am sending you a verification code to your mobile now; you will need to read it out to me so we can approve the protected transaction.'

At this stage, Dan was under heavy pressure. He did not stop to ask why the bank needs a verification code to protect him. He saw only his savings in danger. He read out the code. And then another. And another.

'Excellent, Dan,' the 'policeman' said. 'We managed to save most of the money. Do not tell anyone about this, because the investigation is classified. We will call you tomorrow morning for an update.'

When the call ended, Dan was stunned. Only after a while, when the pressure subsided slightly, did a sense of suspicion begin to gnaw at him. He logged into the bank's app and discovered that significant sums of money had disappeared from his account. At that moment, the pressure was replaced by a heavy sense of guilt.

Analysis of the Case: The Scammer's Tools

In this scenario, one can identify the use of three key psychological tools:

1. Dual Authority: The combination of 'police' and 'bank' creates a front of power that is hard for a law-abiding citizen to disobey.
2. Isolation: The prohibition to tell anyone is intended to prevent the person from receiving an external opinion that might arouse doubt.
3. Saving the Situation: The scammer is presented as someone who has come to rescue, which causes the victim to cooperate out of a belief that they are protecting themselves.

The Mechanism of Stress: Why Our 'Autopilot' Might Fail Us

In many scams, the real hack is not of the computer but of the human brain. 'Social Engineering' is the exploitation of human weaknesses to obtain access to resources. One of the central weaknesses is the difficulty in functioning optimally under pressure.

In a state of extreme stress, the brain may switch to using 'System 1' – a term coined by psychologist Daniel Kahneman. System 1 is fast and intuitive. It is essential for immediate survival reactions, but less suitable for analyzing complex financial fraud. In this state, there is a tendency to rely on mental shortcuts, like the authority heuristic: 'If he sounds authoritative, he is likely telling the truth.'

Another aspect is 'information overload.' During such calls, scammers may inundate the victim with technical details and urgent instructions. The goal is to create high cognitive load, which makes it difficult for the person to stop and ask basic questions.

It is important to understand that the stress does not end with the call. It may lead to shame, which prevents immediate reporting to the bank or police. Any such delay may assist the scammers in transferring the funds and covering their tracks.

Legal Liability: Between Customer Conduct and the Bank's Duty of Care

Here we arrive at the legal analysis. The central question in fraud cases is the allocation of liability for the damage between the customer, who performed actions under manipulation, and the bank, which is supposed to detect unusual activity.

In Israel, the main legal framework is the Payment Services Law, 2019. The law regulates the relationship between the customer and the payment service provider. A key concept in the law is an 'unauthorized payment transaction.' According to the law, if an action was performed without the customer's authorization, the bank may be under an obligation to refund the money. However, the situation is more complex when the customer is the one who authorized the transaction due to deception.

In these situations, the term 'gross negligence' arises. Banks may argue that providing a verification code to a stranger constitutes gross negligence that exempts them from liability. However, there is a trend toward recognizing that in the era of sophisticated social engineering, the psychological pressure exerted is massive, and one must examine whether the customer acted out of free will or was subject to extreme manipulation.

The Bank's Heightened Duty of Care

Beyond the specific law, there is a general 'duty of care' that a bank owes to its customers. A general legal analysis of rulings shows that the bank has an advantage in information and technology, and therefore it is expected to operate monitoring systems to identify activity that is not characteristic of the customer. If a customer suddenly performs unusual transfers in high amounts, a 'red flag' might be triggered in the bank's systems.

Over the years, cases have been examined in which it was argued that the bank failed in its monitoring duty. If the system identified suspicious activity but did not stop it, or if the right questions were not asked when performing an unusual transaction, bank liability may arise. Sometimes courts may examine the allocation of liability between the parties, with the understanding that the bank is sometimes the 'most efficient cost-avoider.'

It is important to emphasize: There is no guarantee here of a specific legal outcome. The likelihood depends on the circumstances – what was said in the call, what protection measures were activated, and whether there were prior warnings. The legal argument based on the psychology of stress is becoming central, explaining that the customer acted under a 'cognitive masking' that was created intentionally.

Warning Signs: How to Identify an Attempt to Hijack Your Judgment?

Recognizing the 'script' is an important defense tool. If you identify one of the following components, it is recommended to stop immediately:

• Extreme Urgency: A demand to act within a few minutes. Real security systems know how to freeze accounts even without urgent action by the customer on the phone.
• Demand for Secrecy: A request to hide information from official sources or family members.
• Request for a Verification Code or Password: Official financial institutions do not request in an unsolicited call for codes sent via SMS.
• Transfer to a 'Safe Account': A concept that does not exist in the official banking system.
• Physical Sensation of Stress: Confusion, an accelerated heart rate, or a feeling of threat are a sign to stop and disconnect the call.

Initial Steps in Case of Suspicion of Having Fallen into a Trap

In a case where a person fears they have provided details or authorized an action under pressure, time is a critical factor:

1. Disconnect the Call: Stop contact with the suspected party immediately.
2. Report to the Bank: Contact the bank's emergency line to demand that the account be frozen and to attempt to stop transfers.
3. File a Police Complaint: An essential action for documenting the event and for the continuation of the process.
4. Documentation: Record the details of the call, the number from which they called, and screenshots of messages.
5. Examine Legal Options: One can examine the possibilities for recovering the funds through professional advice, without rushing to sign waivers with the bank before examining all rights.

Legal Aspect: Summary of Liability

The legal battle in these cases sometimes focuses on the attempt to prove that the psychological manipulation negates the existence of 'gross negligence' on the part of the customer. It can be argued that in a state of extreme stress, the customer acts almost automatically, and that the bank's duty is to establish protection mechanisms that will prevent damage even in these situations.

In the next chapter, we will examine the other side of the coin: 'False Authority.' We will see how scammers build an authoritative persona and use technology to give the call an official appearance.