What should employees do if they suspect a Scattered Spider social engineering attempt?

Employees who suspect social engineering should immediately terminate the interaction, document all details including communication methods and claimed identity, and report the incident to security teams without delay. Do not provide any information, access, or verification during suspicious interactions. Follow established verification protocols independently, using separate communication channels to confirm legitimate requests. Organizations should maintain anonymous reporting mechanisms and ensure employees feel safe reporting potential threats without fear of blame. Our managed IT services include 24/7 incident response capabilities for suspected social engineering attacks.