SECAI Core · phase 11 of 15 · noun

Impersonation

Social engineering attack where an attacker pretends to be someone they are not.

The Explain card

Plain English
Impersonation is a social engineering attack where the attacker pretends to be someone they are not: a colleague, an executive, a vendor, or a support agent, in order to gain trust and access.
Example
A finance clerk gets a video call from what looks and sounds like the CFO, generated with AI voice and face cloning, urgently approving a wire transfer to a new supplier.
Why it matters
Generative AI makes convincing impersonation cheap and scalable. Defenders need out-of-band verification for sensitive requests, because "it sounded like them" is no longer evidence.
Hook
The mask is now made of pixels.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

The incident responder detected impersonation by comparing the support email's sender domain with the organization's registered domain.

How it is built
  • im- prefix in or into, an assimilated form of in- before p
  • person root a human being or individual
  • -ate suffix act as or make into
  • -ion suffix action, process, or result
Where it came from
Origin
English impersonation, formed from impersonate and -ion
Entered the language
1805
What changed
It first referred to giving something personal or bodily form, then to performing a character, and later acquired legal and digital-security uses.
How it is spelled
Pattern
The prefix in- changes to im- before p.
Pattern
A verb ending in -ate forms an -ation noun by dropping the final e and adding -ion.
Pattern
The suffix -tion spells the final shun sound.

Spelled like

  • implantation
  • implementation
  • impatient
Broken into chunks
  • im
    • impossible
    • impatient
    • implant
  • person
    • personal
    • personify
    • personhood
  • ation
    • authentication
    • verification
    • representation
What it sits beside

Same subject

Same shape

  • implantation
  • implementation
  • imprisonment

identity deception techniques

  • spoofing
  • masquerading
  • pretexting

communication channels

  • email
  • voice call
  • text message

Where it sits in the deck

Phase 11: Threat Landscape: Attack Vectors and Adversarial Techniques

With defences named, learn what they must defend against — the full catalogue of attack techniques targeting AI systems, their inputs, outputs, training pipelines, and supply chains.

Neighbours in this phase