Status cues are visible or behavioral signals that suggest rank, confidence, or social position. In cyber security, these cues matter because people often decide whom to trust before they verify identity. Attackers exploit that instinct by borrowing the look and tone of authority: a spoofed executive email address, a polished profile, an urgent but confident message, or a call that sounds like it comes from IT, finance, or management.
These signals are common in phishing, business email compromise, and social engineering. A message that feels “important” can pressure a victim to skip normal checks, approve a payment, reset credentials, or share sensitive data. Defenders reduce this risk by teaching users to separate rank from legitimacy. Verification steps such as call-back procedures, MFA, signed requests, and out-of-band approval help counter status cues that are designed to manipulate trust.