How to Design and Execute Effective Social Engineering Attacks by Phone

**Executive Summary:** This blog-style playbook outlines a complete methodology for phone-based social engineering penetration tests, including rules-of-engagement, passive and active reconnaissance techniques (Google dorks, social media, SSPR abuse), caller ID spoofing and burner number strategies, concrete ruse scripts, tips for avoiding suspicion, and post-compromise steps such as account takeover, evidence capture, and reporting.