System and Method for Detecting and Preventing Social Engineering-Type Attacks Against Users

摘要

The invention relates to system for validating a transaction in an institution and ensuring that said transaction has not been exploited by use of social-engineering, which comprises: (A). in an institution server: (a) a validation engine which is configured to: (a.1)receiving a request message for the performance of a transaction validation against a possibility of social-engineering type manipulation, said request comprises parameters of said transaction; (a.2) based on a set of predefined rules and on a storage of predefined template messages, selecting a message template from said storage, filling fields of the message with specific data, and sending an inquiry message to an application of said institution within a customer device; and (a.3) receiving a response message from said application, and either repeating formulation and sending of an additional message to said application, or concluding the request; (B.) in a customer device: (b) an application and a user interface for: (b.1) receiving said inquiry message, and displaying the same to the customer; (b.2) receiving a customer response to said inquiry message, formulating a response message, and forwarding to said institution server; wherein said rules and said template messages are particularly designed to allow formulation of messages by said validation engine that inquire the customer with respect to social-engineering types of issues.