Field notes · 27 January 2026
Pretexting at the reception desk
Walk-in social engineering tactics and how eThekwini reception teams practice calm refusal during workshops.
Not every social engineering attempt arrives by email. Pretexting at the door — a “technician” without a ticket, a courier with an incomplete name, a relative collecting documents — still works because reception staff are trained to be helpful.
During Tool Heathpath sessions we stage polite but incomplete visitor stories. Participants practice asking for a sponsor name, a booking reference, and a callback from the company switchboard before escorting anyone past the lobby.
The goal is not hostility. It is consistency. When every visitor hears the same short checklist, exceptions stop feeling personal and start looking like process.
Branch managers in KwaZulu-Natal often tell us the hardest part is supporting reception when a senior visitor grows impatient. Leadership tabletops help here: executives agree, in advance, that delay for verification is expected — even when the visitor is important.