Live detection is the monitoring of an ongoing interaction-such as a chat, email thread, phone call, or approval workflow-to spot signs of fraud, coercion, or other suspicious behavior before the exchange finishes. Unlike awareness training, which prepares people in advance, live detection looks for risk in the moment.
It matters because many social engineering attacks rely on urgency, authority, and pressure to push a victim into acting quickly. A live detection control can flag unusual payment requests, credential prompts, sender changes, or conversation patterns and trigger verification, step-up authentication, or human review. In practice, it may be implemented with message analysis, call monitoring, risk scoring, or workflow guards that pause high-risk actions until the request is confirmed.