arxiv-2609-04410 SRC-0680 · paper

Engineered Persuasion: Evaluating Personalized Pretexts in LLM-Generated Spear Phishing

Created: 2026-09-03 · Ingested: 2026-10-24

Large language models can insert workplace details into phishing pretexts at low cost, but those details may either support or undermine a message's credibility. We recruited 180 U.S. working adults to evaluate simulated, AI-generated phishing emails in a disclosed survey. The emails used four cumulative levels of information: workplace (Level 1); recipient name and job title; job responsibilities; and coworker/shared-project context (Level 4). Participants rated each message's convincingness from 0 to 100, chose one stated action (open the link, investigate, delete, or report), and explained

Referenced by

Claims in this catalog that draw on this source, and whether as support or counterpoint.

supportsWhen LLM-generated spear phishing emails are built from cumulatively deeper workplace detail (employer, then name and title, then responsibilities, then coworker and shared project), U.S. working adults rate them as more convincing and more often say they would click, and they also report the message as phishing less often and delete it more often as detail increases.