The Psychology of Yes

Hosted By Chris Parker

338
Click Below to Subscribe
“We are wired to give people the benefit of the doubt. Most of the time, that trust allows us to cooperate, communicate, and get along in the world.” - Vanessa Bohns Share on X

It is easy to say you would never fall for a scam when you are looking at the situation from the outside. In the moment, though, things can feel much less obvious. A request may sound reasonable, the person may seem trustworthy, and saying no can feel awkward enough that you go along with something you would normally question.

Today’s guest studies exactly why that happens. Vanessa Bohns is the Bronstein Family Professor and Chair of Organizational Behavior at Cornell University’s ILR School. Her work focuses on social influence, compliance, and the pressure people feel to cooperate, even when they are uncomfortable with what they are being asked to do.

Vanessa shares several experiments that show just how strong that pressure can be. People agreed to write in library books and even handed over their unlocked phones. She explains why it can be tougher to refuse someone in person or over the phone. The conversation also covers a few simple ways to slow things down before making a decision.

“People are much more likely to agree to requests than we expect. One of the biggest reasons is that saying no is often more difficult than we realize.” - Vanessa Bohns Share on X

Show Notes:

  • [01:00] Vanessa Bohns explains how she began studying influence and why people are more likely to say yes than expected.
  • [04:01] Small favors reveal how much people underestimate the power of a simple request.
  • [06:53] The library book experiment shows how awkwardness can outweigh clear ethical concerns.
  • [09:58] Why people are wired to cooperate and avoid the social discomfort of saying no.
  • [15:37] How scammers use a few believable details to make an unlikely story feel true.
  • [18:32] Why a small cue of authority can be more convincing than an elaborate explanation.
  • [22:29] Creating distance from a request gives you time to think and verify what is happening.
  • [25:31] Advance warning helps people make a more thoughtful decision instead of reacting automatically.
  • [29:46] Participants hand over their unlocked phones even when private search histories are at stake.
  • [33:16] Incentives and the fear of losing access can push people to break their own rules.
  • [34:24] Social pressure can be powerful even when there is no financial reward.
  • [37:49] A phishing email uses authority, urgency, and reciprocity to fool an influence expert.
  • [41:02] Firm personal rules can make it easier to resist pressure from salespeople and scammers.
  • [44:20] Asking for a request in writing reduces pressure and gives you time to process it.
  • [46:20] Why knowledge does not make anyone immune and scam victims deserve more grace.
  • [48:20] Helping a family member avoid another scam without blaming them for what already happened.
  • [49:20] Vanessa’s final takeaway on slowing things down and preparing for the possibility that anyone can be fooled.
“Take every precaution you can, but remember that knowledge does not make anyone bulletproof. Give yourself and other people a little grace when something does happen.” - Vanessa Bohns Share on X

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review. 

Links and Resources:

Transcript:

Vanessa, thank you so much for coming on the podcast today.

Thank you so much for having me. I'm really happy to be here.

Looking forward to this conversation. A topic that's a passion of mine, and we're going to get into it. Can you give the audience a little bit of background about who you are and what you do?

For sure. I am an experimental social psychologist, and I'm a professor of organizational behavior at Cornell. My research is on social influence. In particular, I look at how surprisingly effective really simple influence tactics can be. They can be really surprisingly effective when we're the ones trying to influence someone else.

They can be surprisingly effective, and we could be surprised by things that people have agreed to do just because they were asked as outside observers and as targets, which of course can open us up to all sorts of nefarious actors. We tend to be overconfident about our ability to not fall prey to these influence tactics, but when we're put in the moment where we know we shouldn't do something but to say no or to go against what someone's asking us, it would be impolite or we think might make someone not like us, we tend to defer to being polite and likable.

Gotcha. Is there something that got you into this field in particular?

Yeah, so I had worked in advertising and marketing for a little while, and then I went to get my PhD at Columbia, and I was studying sort of just ordinary influence and persuasion tactics. If you ask for something one way versus another, is it more effective? Kind of like doing almost market research and testing. One of the big things we found early on, the professor I was working with at the time…

Actually, the differences between how we asked for things, particularly when we asked someone in person or even over the phone when you can actually hear another person's voice, the difference in the phrasing was not as important as sort of the difference between what we expected to happen and what would actually happen. We would think like, “Oh, you know, I have to get the phrase just right.” Like if we come up with this perfect phrase to ask for something, we'll get this increase in compliance.

And instead what we found was that people were just way more likely to comply with really simple, just ordinary requests that weren't phrased like anything spectacular than we expected. Eventually, then our participants, we started to run in studies expected. What started out as sort of just this like, “OK, we're doing some market testing,” checking these things, became this real insight that people are just more likely to agree to requests than we expect, than they expect. We started to examine why that was the case.

What started out as sort of just this like, “OK, we're doing some market testing,” checking these things, became this real insight that people are just more likely to agree to requests than we expect, than they expect. -Vanessa… Share on X

One of our big conclusions was that it's difficult for them to say no, more difficult than we tend to expect. That just kind of opened up this whole other area of possibility. It's not just about, like, marketing tactics. People are also, they also find it difficult to say no to an ethical request and intrusive requests. We've tested a number of those things in the lab as well.

What are some of the more interesting tests that you've done where the results were totally not what you were expecting?

I will say from the very beginning, almost every study we have run I'm like, “There's no way this is going to work. There's no way that is going to work.” And each time we're just blown away by how willing people are to do things. Our original tests were bringing people into the lab and having them ask other people for favors. Pretty small favors, you know, “Will you donate to my charity?” “Will you fill out a survey?”

One was, “Can I borrow your phone to make a call?” And in all those cases, we would ask our participants before they went out and made these requests, “How likely do you think people will be to say yes to you?” And they would have to go out, get five people to say yes by asking as many people as they needed. They would keep track of how many people said yes and come back and tell us.

And each time people are about twice as likely to agree to those things as our participants expected. At some point we were like, “Well, how far can we push this?” We started coming up with more nefarious, more questionable things that we could have our participants ask people for. We started, again, a little bit small. We had our participants ask people to tell a white lie on their behalf and essentially sign their name on a document saying something that didn't actually happen, so lying for the participant.

We told our participants, “You're going to go out and ask strangers. You're going to tell them, you're giving, you're supposed to be giving this pitch, but you're tired of giving it and you have to get a certain number of signatures. Would they just sign their name on this document saying you did something that you didn't actually do?” They would guess, to get three people to do this, I think I'm going to have to ask about 10 people. They would go out and ask people. It turns out they only had to ask something like five or six people to get three people to agree.

Again, this ratio of about half the people they expected. These are people just signing their signature on a document, lying on this person's behalf. You could say, ”Well, that's a pretty small thing to ask.” You could convince yourself you're helping this person out. We really wanted to come up with something that everyone would realize is, like, something you shouldn't do and something that the people, our participants, were asking would feel uncomfortable with, right?

Like they would question whether they should really be doing this. We came up with the idea of having our participants ask people to vandalize library books. We took a bunch of books off my bookshelf. We put little numbers on the spines to make them look like library books on campus. We sent our participants into libraries and we had them go up to people and say, “Hey, I'm playing a prank on my friend, but they know my handwriting. Will you just write the word pickle in pen in this library book?”

And then they would hand over the library book and a pen and see what people did. We found the exact same results. People thought that people were about twice as likely to say no to them as they actually were. In fact, we found something like 60% of people agreed to do this thing to vandalize these library books. What was so fascinating is that you could tell that people were uncomfortable with this, right?

Our participants also kept track of what people said and they would say things like, “We shouldn't be doing this. This is vandalism. We're going to get into trouble.” And yet it was more uncomfortable for them to say no to this person face to face, to challenge what this person was suggesting was an OK thing to do than to do this thing that they very clearly were also uncomfortable with doing. That was just really, really fascinating to us.

And yet it was more uncomfortable for them to say no to this person face to face, to challenge what this person was suggesting was an OK thing to do than to do this thing that they very clearly were also uncomfortable with doing.… Share on X

I guess there's two different sides to this. Were the participants just underestimating their ability to convince people to do something wrong? Or was it the people who were asked to be doing something wrong kind of overestimated their ability to say no?

Yeah, I think both things were happening. This is also part of the sort of interesting takeaway. So, for sure people were underestimating how much power they had to get someone to do something. In this case, to get someone to do something unethical, they came back very surprised as sort of their own influence. At the same time, the people on the other side, when we ask people abstractly, “What would you do in this scenario?” People are like, “Well, obviously, I would say no. I would never do something like that.” And I get these angry, when this gets, you know, talked about publicly. I get these angry emails and I get people saying like, “Kids these days…” and, “There was something wrong with the participants in these experiments.” Not realizing in the heat of the moment when you're face to face with someone, that that awkwardness is such a powerful driver of behavior.

There's a phenomenon called the illusion of courage. This is kind of what we're seeing exhibited when we're not in the immediate experience of having to sort of stand up against someone when they're asking us for something or point something out that we think is wrong. When we might offend someone by saying something, when we're not in that immediate situation, we say, “Of course I would stand up. Of course, I would do something. I wouldn't be afraid to do something in that situation.” And then in that situation, the same people who say, “I would have said no. I would have made a point about how this was wrong.” Those people tend to just go along with the situation.

Interesting. Is there—what’s the mechanism? Is there a particular mechanism that makes us do that?

To go along with people, to actually find it difficult to say now. There's a lot of things there. We tend not to want to rock the boat. We think about, like, other people as being inclined to be disagreeable. I think we have an idea that other people are inclined to say no to us, to go against what we have to say, that we have to kind of get past no to get to yes.

we are evolutionarily wired to cooperate, to not be rejected from the pack. When someone is asking us for something, to say no is essentially rejecting them. It might mean that they don't like us. It might mean that it affects our… Share on X

But in fact, we are evolutionarily wired to cooperate, to not be rejected from the pack. When someone is asking us for something, to say no is essentially rejecting them. It might mean that they don't like us. It might mean that it affects our reputation. They think ill of us. We might offend them and they might be angry at us. All those things come into play.

We forget how much those things are just going to be so present in that immediate interpersonal moment. Unlike sort of an evolutionary level, we're wired to maintain these smooth relationships, not rock the boat on a proximal sort of level. What that means is that in that moment, you're just feeling this incredible awkwardness. It's just embarrassing and it becomes an actual emotion that makes us just agree, go along.

And on the flip side, is there a sociological reason of why we don't think people will agree with us? Or people won't do what we asked them to do?

Yeah, I mean, so part of it is that asking as well is very fraught, right? Saying no is a very fraught sort of prospect. But asking someone for something is also very fraught. We wind up being very egocentric. We focus on our own insecurities and anxieties. We worry that by asking for something, someone is going to judge us negatively. We worry that they're going to say no and reject us.

We have all those worries when we're on that side of the equation. We're sort of priming ourselves in this defensive, pessimistic way to prep for rejection and sort of expect rejection. We are not putting ourselves in the other person's perspective and realizing how hard it actually is to reject another person.

Gotcha. Let's pivot to how this applies to scams and being taken advantage of, either online or in person. Because I think everybody, you know, when everyone hears a story of someone who's scammed, the kind of the knee-jerk response is, “Oh, well, that never would have happened to me.” But when you talk to victims of scams, it was, “In the moment, maybe it felt odd, but it didn't seem like this was really a scam.” Why is that?

Yeah, I mean, there are so many things that go into the way we judge other people for falling for scams that we most likely would have also fallen for. A classic one is hindsight bias. Once you know how all the sort of facts shook out and what happened in this situation, what someone was trying to do, it's really easy to look back at the facts and say, “Oh, wow. Like, from the beginning, you could tell that this person was a scam artist, right?”

I've written some articles about, like, Anna Delvey and the Tinder Swindler, and these people are like, “How could these people have fallen for these ridiculous stories?” But you realize that, you know, in the beginning, like you said, like, even if you have a little bit, like, you're like, “Oh, that's an odd explanation. This is an odd story.” The idea that we would jump to, “Therefore, this person is scamming me. Therefore, this person is lying,” right? It's just not realistic.

We are wired to give people the benefit of the doubt. We are wired to trust people. In fact, if we assumed that people were lying, if we really readily assumed that most people were lying, we wouldn't even be able to have… Share on X

We are wired to give people the benefit of the doubt. We are wired to trust people. In fact, if we assumed that people were lying, if we really readily assumed that most people were lying, we wouldn't even be able to have communication. You doubted everything someone said to you every day, someone would be like, “Oh, I didn't like the steak I had last night at dinner.” Or you'd be like, “I don't believe you.”

There has to be a basic sort of assumption. And 99% of the time, that is the correct assumption. That's how we cooperate and coordinate and get along, you know, in the world. Someone says something, it's a little odd. In the case of, like, Anna Delvey, she talks about how the money didn't move through yet. “Could you just cover me for this expense?” And you're like, “Oh, wow, you know, I'm kind of surprised that she needs help, but I guess I'll go along with that.”

When we think about the alternative, what's the alternative to say, “I don't believe you,” right? Like, who jumps to that? There's so many reasons we wouldn't want, again, to offend another person, to think that other people are trying to scam us to believe that about the world. In that moment, most of us will just kind of go along to get along. It's only after the fact with, looking at this in retrospect, looking at it in hindsight that we kind of see how the pieces came together.

I assume the stories and the support of those stories provide us evidence for the things that we kind of want to hear. That if we see lots of pictures of the person around expensive cars and they're doing fine dining, all that supports the fact that they're rich. And then this one thing of, “Well, the money just didn't go through.” Well, OK, that must be the case because there's just all these other examples or apparent examples of wealth or whatever they're saying.

Yeah, and we're generally not looking to find the things that don't fit the story. We're trying to make the story work. Our brains will work to help that person tell that story. I guess that's how it all goes together. -Vanessa… Share on X

Yeah, and we're generally not looking to find the things that don't fit the story. We're trying to make the story work. Our brains will work to help that person tell that story. I guess that's how it all goes together. They fed me these little breadcrumbs and that is convincing now. Another sort of, I guess we could call him a scam artist, but more of a social engineer is Kevin Mitnick. I don't know if you've talked about him probably, right?

Yeah, we've talked here and there about him over the years.

OK, so yeah, I'm sure. So of course, Kevin Mitnick was a social engineer who would gain access to data and people's passwords and things like that, not from computer hacking, but from sort of people hacking and using these social influence tactics. He would give just enough information that someone would believe what he was asking for, right?

He would, like, call around to different voicemails at a particular organization, find someone who was out on vacation, call their administrative assistant and say, “Oh, you know, did someone already leave on vacation? I must have just missed her. You know, maybe you can help me.” And that just little piece, you know, gives you the trust and the authority to think, “OK, I guess this guy, I should listen to this guy,” right?

Then you can go on to say something that if just a random person called up and said, “Will you hand me this? Will you send me this thing?” We would doubt, but he gave just that little piece of information and we're like, “OK, that's enough for me.” Because in the end, I want to believe that if someone's asking me for something, I'm not getting scammed in this moment.

Gotcha. Is it more effective for someone, like, was it more effective for someone like Mitnick to give just the bare minimum amount of information or does a very elaborate story—is that more successful or is it less successful and there's more detail?

I think in his case is the way he describes it. It seems like he really stuck to just, like, little nuggets that he couldn't be challenged on too much. I'm not sure if you could get sort of lost in the weeds if you're trying, if you, like, try to, like, give too much of a backstory, but I think that's part of the point is that you don't need…it’s, again, we go into this thinking, “How am I going to convince this person to send me this sensitive information?” I imagine when I think about it as, like, a non-scammer, it's like, “Oh, well, I'll come up with this elaborate explanation for why,” but in fact, very, very simple things.

Tiny cue that you should trust me. I know so and so. I have some authority. There's some nugget of truth that I'm giving you,” and then just a request, and that simple request is so hard for people to say no to and to challenge someone on what they're presenting like, “Do you really know my boss?” I mean, who would feel comfortable saying something like that, right? Really just that tiny little nugget and a request is enough and I think that's what's so surprising is it's not elaborate.

Interesting. Is there a difference between written, over the phone, and in person? Does it kind of scale up with the more senses involved, the harder it is for us to discern?

Yes, very much so. We've run studies where we've had participants ask for things either in person by email, over the phone, and by Zoom or just a video conference call. And we find that it definitely scales. The biggest sort of, the sort of strongest effects we find are that in person, nothing beats in person. Like having a physical person in front of us will always be the most effective sort of influence tactic, right?

the sort of strongest effects we find are that in person, nothing beats in person. Like having a physical person in front of us will always be the most effective sort of influence tactic, right? -Vanessa Bohns Share on X

Because again, not to keep going back to this evolutionary explanation, but it is part of it. We were evolved to interact with people face to face. If someone is in our physical space, we're going to pay a lot more attention to that person because they could, evolutionarily speaking, harm us, help us, etc. It's just going to be so much more powerful. On the other, the sort of opposite end of the spectrum is email.

It tends to be the least effective influence, means of influence, because not only do you lose all these social cues that you get, so you lose the in-person element. That person can't physically harm you in any way or help you in a physical way. But at the same time, you're losing these social cues and you've got this asynchronous time element. Things that happen asynchronously, they give you time to think.

We were evolved to interact with people face to face. If someone is in our physical space, we're going to pay a lot more attention to that person because they could, evolutionarily speaking, harm us, help us, etc. It's just going… Share on X

You can even ignore an email. Even though phishing emails have gotten much, much better and I have even fallen prey to them myself, they are sort of the least effective. Then phone and video are somewhere in the middle. Again, now you have the synchronicity, you feel like you have to respond to someone in real time. They seem like a real person. You hear their voice, you hear their tone. We find that that and video are pretty much on par with each other.

Gotcha. If we overestimate our ability to say no and to say I overestimate our ability that when we get the call from someone claiming to be from our bank, that I would never give them information. Is there a way to kind of break that cycle? With email, we've got time. We don't have to respond right away. There isn't that kind of, without the social cues, we can have a little more distance with it. But when we have the social cues, is there a way to inoculate ourselves, so to speak?

Yeah, I think a key word that you used is distance. The more you can sort of remove yourself from the immediate context where someone is asking you for something right now, that you have to respond to right now, in particular face to face or verbally on the phone, you want distance, because that person is trying to get you to make a mistake in that moment.

The more you can sort of remove yourself from the immediate context where someone is asking you for something right now, that you have to respond to right now, in particular face to face or verbally on the phone, you want distance,… Share on X

Because that's when we're not thinking straight. It's hard to find the words to say no in that moment. It's hard to find an excuse. We don't want to offend the person. We don't want to be like, “Well, I'm not sure if you're really my bank. I would like some time to sort of think about it, or I want to ask someone,” or can you verify. As much as you can get distance from something, you can manufacture an excuse.

I am interested in this, but can I call you back? Can you give me a number to call you back because I'm in the middle of something else?” One thing that's really helpful for both saying no but also just delaying having to respond is to point to an external person or an external organization or role because a lot of us don't want to sort of personally hurt someone's feelings or personally challenge someone. But we can say, “Oh, I have someone else in my office. I was on the other line.”

I have someone I have to check with who's also on my bank account.” Or even, you know, if you're part of an organization saying, “Oh, my boss, my IT person, there's a role here. I always have to do this protocol.” Anything that, like, kind of points away from you, people are much more comfortable using an external excuse. Those are some things. But I'll tell you about some studies we've been running also that sort of give a little bit more credence to this idea that, like, taking time makes us sort of process these requests more mindfully.

We've been running studies in our lab now where we've been asking people to unlock their phones and give them to us basically, and we bring people into the lab. Typically, without warning, we seat them and just in an individual room. One of our undergraduate experimenters who's told to just be dressed in ordinary clothes goes into the room and says before the study begins, “We'd like you to unlock your phone and hand it over to us so we can look through it for a little bit.”

And this, of course, is, like, a really intrusive request. When we ask people, you know, in the abstract, we say, “Would you hand over your phone in this situation?” Even people who are sitting there in the lab, we don't ask them. We, like, say, “Would you do this?” Only about a quarter people say that they would. Three quarters of our participants are saying, like, “I would not give you my phone.”

But when we actually ask them, we put them in the actual situation. We have our undergraduate RA ask them this request. The first time we did this—and this is another one of those, like, we didn't think this would work and then we could not believe how well it worked. Ninety seven percent of our participants agreed, just mindlessly unlock their phone and handed it over to our research assistants.

It was fascinating because they clearly, you could tell that they were uncomfortable and our experimenters would tell us they would leave the room and sometimes, like, the person would be standing up, like, kind of just figuring out like, “What did I just do? I just let this person take my phone.” But in the moment, again, our default is to go along to agree. When we’re, like, in the default of the moment, we just do it.

One of the things we've wondered about is if you give people more time, like if you actually tell them in advance of when they're going to be asked for, like, what you're going to ask them so that they can process it in advance, come up with the words to say, no, just have time to think about it, what will we see that's different? And so we have some new studies where we tell people 24 hours in advance.

When you get to the study, we're going to ask you to unlock your phones and hand them over to us.” And those people, they're slightly less likely to hand them over, which is what we expected. When they report how they felt about it, they made a more mindful, informed decision about what to do. That takes the responsible person saying like, “OK, I'm going to ask you,” which is not the cases that we're talking about.

But it does tell us that, like, if you take the time, if you say, “I'm not going to make decisions on the spot if I feel like someone is rushing me, that is a cue.” I mean, like, I feel rushed in my body. I'm feeling rushed. That is a cue to, like, stop the interaction and push pause. You don't have to say no to the person because that's really hard to do. You just say, like, “I need to think about it. I'll get back to you.” I think that makes a huge difference in our decision-making.

Yeah, there was one of the things that I consciously thought about a number of times when buying a car is that I went to the lot. I kind of knew what I wanted. But in my mind, I decided in advance, even if this is the vehicle that I want, I will not buy it today. I will come back tomorrow and buy it. Regardless of whether it's the right price, regardless of whether it's the last one, that I'm not going to buy it today and any time the sales are, “OK, so can we write this up today?”

No, I need to sleep on it. I don't make big financial decisions without sleeping on it.” That the sales steps would really, really, really push back. Because I think historically, if someone walks, someone walks out of a dealership, they're not coming back. But that was always my mindset of like, “I'm going into it with this is my policy, and I don't do these things now.” Later on in life, I've changed my policy.

But there are a number of times that was what it was. It did feel really awkward telling the person that. When they put up resistance to my resistance, it got even more awkward. Harder to say no. I was curious about when you were asking, when you're telling people in advance that you were going to ask them to unlock their phone, did a larger percent of the people just not even show up now?

That is a great question. We were worried about that. We actually didn't find that to be the case. I think at least in these particular studies, they were incentivized to get extra credit in a class that they cared about. At the same time, we did tell them that. This is true no matter whether they were told this in advance or in the lab. We tell them you can say no and still do the study. We tell them that they can say no, but they don’t, they still don't feel like they can actually do it in a way that feels comfortable to them. And so we didn't have that particular issue.

Interesting. I guess if there's the right incentives, then if someone really has something on their phone that they're afraid of, they're going to remove it and potentially remove it in advance.

That's true, yeah. We have another version of the study, which I find really fun, which is we tried to come up with a version where, because we figured our participants could convince themselves of, “What can you really find on my phone that isn't already password protected?” or something. Like they can't get into a bank app. They can't get into XYZ.

We're like, “What could we plausibly look at that people would really not want us to look at?” And so we told people we're going to look at their web search history, which no one wants anyone to see the last 10 things they have googled probably. We said that. We actually found the same kinds of results, even when people were sort of, they had this concrete idea of like, “Oh, wow. They are going to look at something I would really rather they didn't see.” People still were handing over their phones at, like, these extraordinarily high rates.

Interesting. What percentage of the people—I think I forget if you said it or not—what percentage of people said that in the pre-study that they wouldn't hand over their phone?

It was actually a between-subjects design. It wasn't the same people, but it was the same randomly selected population. We didn't ask them, like, “Would you and then ask those same people?” It was either you were asked, “Would you,” or you were asked, like, actually asked. We just have the between subjects, randomly assigned percentages.

And I assume that most people said they wouldn't hand over their phone. But in reality, those that were asked did.

It was, like, 75% said I would I would never do that. We said for those people, we said, “We're planning on doing a study like this, but we're just making sure that it's going to work. Would you do this?” And 75% were like, “No, of course not.” And then when we actually asked, it was 97% who said yes.

That's crazy. It really startles me to think that someone would so easily hand over their phone.

I know. When we came up with this design, we thought no one would do it. Then we ran the study for two weeks and not one person said no for two weeks. We're like, “This is insane. We never thought that that would happen.” I know some people will ask, “Is it just, like, young college students who have a—there’s a couple of responses to that.

One is that these people are randomly selected to either be asked or predict what they were going to do. And even those same students predicted that they would say no and said they would say no. But the ones who were put in this position just didn't. And then we also ran the study in a downtown Chicago lab where the average participant was closer to, like, 35 years old. We got the same findings, essentially.

Interesting. But I guess the reality bears true is I can't tell you how many times I've been traveling and seen someone unlock their phone, hand it to a complete stranger and say, “Will you take a picture of me?” And that's like, I can at least make an argument in my mind of, “Well, I'm in a study. Maybe this has to do with a study, like, I could convince myself that maybe it's safe to do it there.” But it's interesting that we throw away our rules if we think breaking the rule benefits us.

Exactly. That gets back to the incentive. Like, people showed up to the lab because the incentive was there for them. That works also for, like, phishing scams. I mean, one of the ways that Kevin Mitnick also got people to hand over passwords and sensitive information was to tell them that they were going to be shut out of their email or shut out of their files and this idea of like, “Oh, wait. I actually want that or I need that.”

Now the incentive is high enough that I am willing to sort of break my rules and tell this person my password over the phone, right? With that little breadcrumb of authority, you know, I'm calling, I have some sort of, I've given you some piece of information that suggests that we're part of the same group. I'm like an authority figure who could be calling you.

Now I'm telling you, you can't have your data unless you give me your password even, and it's all in a very—it’s not like a sort of—it doesn't sound nefarious to the other person, but they know they're not supposed to do this. But in that moment, the incentive is just too high. And so they break their rule is I'm not going to use the phrases.

Is positive reinforcement more effective than negative reinforcement? “If you don't do this, something bad is going to happen,” versus, “If you do this, something good will happen.”

I'm not sure that we know that; I think both can be pretty effective. Definitely, like, you take something away from someone and they feel desperate to get it back. There is a lot of work that negative can loom larger than than positive. But I think we've seen that even. Even the positive incentives seem to make a pretty big difference again, like even just getting extra credit in a study.

We have so much research showing that even when there's no incentives, the only incentive is not to offend the person who's asking you, is to not be a jerk or be seen as a jerk. That is enough. You don't even need the incentive… Share on X

Here's the part that I actually think is most interesting because we're talking about incentives. And of course, that is important. But we have so much research showing that even when there's no incentives, the only incentive is not to offend the person who's asking you, is to not be a jerk or be seen as a jerk. That is enough. You don't even need the incentive piece. You just need the social interactive context.

Is there a threshold where the incentive has a significant impact on the results?

Yes, but it seems to be at a higher point than we expect. I'd even say, like, yes, because so when we've run studies—so, as I mentioned, initially we would have participants go and ask people for small favors, like we felt a survey. We've done studies where we've had people either offer money in exchange for doing the survey or not. We've varied how big or small the survey is, which is another side of the incentive is it's really easy or it's more difficult.

What we find is that the people who are doing the asking, they really think that that dollar or the length of the survey is going to make a huge difference on other people's behavior. We think that incentive, like people do things for incentives. But in fact, it had almost no effect on the other people at these small levels.

As part of my first book, which was about how much more likely people are to agree to do things for us than we expect, I interviewed people who ask donors for millions of dollars. This is like a whole other kind of version. When the incentive gets that high, it's like the whole context has changed. Still, you can't really sort of say it's all about the incentive. A lot of that is also about the relationship.

I think the general theme is that social pressure and social relationships play in many cases as much of a role in our behavior as tangible instrumental incentives, but we tend not to realize that. We tend to underestimate the… Share on X

It's also about the social interaction. I think the general theme is that social pressure and social relationships play in many cases as much of a role in our behavior as tangible instrumental incentives, but we tend not to realize that. We tend to underestimate the power of that social context.

Earlier on, you said that you had clicked on a phishing link. What about that got through? Clearly there was a you had the option of time and you had an asynchronous on the time aspect of it. What convinced you to click on the link?

I was so embarrassed by this because I clicked on something I shouldn't have. And I had to tell my IT department and just kind of go in, all ashamed, like, “Guys, I clicked on something. Can you come check my computer?” But basically it was as someone who studies social influence and is acutely aware of Bob Cialdini's principles of influence, which, we've been sort of talking about and are what Kevin Mitnick tended to use for his phishing scams.

I fell prey to every one of them in this sort of phishing email. The principles of influence are authority. You establish some sort of authority that makes someone want to think that it's OK to, or they should go along with what you're asking. Liking and unity. Someone feels part of the same community. You like them because they're part of your community. Reciprocity. Like, they do something for you, so you feel obligated to do something for them. Scarcity. That’s, like, where someone says you can't have access to your files or there's some sort of urgency. And you're just like, “Oh, my God. I need to do this thing.”

All those things, phishing scams, will sort of use to try to get you to respond. I got this email and it said it was from the dean of my school, who is my boss. First off, you get an email that says it's from your boss and you're just immediately, like, you set up a little straighter.

That's the email you open. You're like, “This subject line said something about how he needed to talk to me right now.” Sometimes things do happen. We might, like, something could come up. I'm the chair of my department. Something can come up and there can be an urgent matter. I was like, “Oh, wow. My boss needs to talk to me right now.” And I can't remember the exact details, but there was some element of like, “Let me know and I'll make sure I do something that I, like, we'll fix whatever's been going on.” Some sort of vague promise to, like, reciprocate. It was like all of these pieces.

I open the email and I can't even remember if it was, like, a link or whatever, but I wound up eventually seeing it took time before I actually, like, looked at the email, the end of the email where I could tell it wasn't coming from Cornell.

But it was already too late, and I had to go to IT. But it was, like, one of those things I tell my students this. I teach Cialdini's principles of influence and I tell my students, “I'm going to tell you all these things, and still knowing them, you are going to fall prey to every single one of them, because when someone does you a favor, even knowing that this reciprocity is an influence tactic, you're going to, every part of your being and your emotion is going to be, like, wanting to pay them back.”

When someone gives you a compliment, even if, you know, like the car salesman, right? Like it still is going to feel good and you're going to feel a little warm and fuzzy to that person. Like the brilliance of these, unfortunately, is that knowing them is not often enough.

What was interesting when I was interviewing Cialdini is that it's marketing techniques that are being used for scams. And you don’t—it's like, “OK, it's a marketing technique, but is it a scam? Does it really help?” Like if I were to say, “Well, watch out for authority,” which I tell people to watch out for urgency.

OK, well, this is every commercial we've ever seen, you know, scarcity. This is every commercial we see in our lives, not just what scammers are doing. It's sometimes, it's very hard to split the hair and saying, “OK, well, these techniques are now being used with bad motives,” versus “Hey, we just want you to buy our product.”

That's why, like your strategy for going into a car dealership and having a rule that you're not going to break instead of having to, like, use the cognitive capacity to, like, make a decision in that moment, it's that will work for marketing for sales. It'll work for phishing. Trying to have rules that you don't break where you're like, “It's not me.”

I'm not, like, making, using cognitive effort to make a decision in this moment because it could be really hard when you're put on the spot. Also, it's not saying something about me not being helpful or not being nice or being rude. It's like, “I'm sorry. This is my rule. I don't do that.” It can really help you in all those different contexts.

Would it also be a good rule if we are more easily influenced by, like, audio-visual interactions that if we get an email saying, “Hey, we want you to jump on a call or jump on a Zoom meeting,” that we have a rule for that as well? “I don't do Zoom meetings without 48 hours. No, you know what? Oh, my house is a mess. I can't do a Zoom meeting.”

Yeah, 100%. I think basically I went up talking to people about both sides of the equation, like how you get people to say yes to you. Then also how to make it easier for you to say no. It's funny because it's just the flip side. One clear way to get people to be more likely to listen to you and agree is to try to get them to actually talk to you on the phone, right? Or in person or over Zoom.

That's a tactic. It's a persuasive tactic. Pushing back on that is also a way to make it easier to say no. To say like, “Actually, I'd rather just, you know, work this out over email first.” The other thing we talked about, this advance notice that we gave our participants advance notice of what they were going to ask. You can do that as, like, if you're kind of being a responsible asker, you could say, like, “I'm going to ask you something tomorrow. This is what it's going to be. Take some time to think about it and then we'll discuss.” That they've given advance notice.

But you can take that into your own hands as well. If someone emails you and says, “Hey, I really want to get on a Zoom call and talk to you about something. I really want to ask you something.” You could say, like, “I'd really like some time to process before you get on that call. Can you tell me over email what it is you want to talk about, what it is you're going to ask so that I'm prepared to have, like, a real conversation about it when we hop on a call?” You can kind of ask for your own advance notice as well.

I like that the answer of I think that's just good in life anyway is less cognitive load in the moment. I have time to process. I have time to think about it. I have time to make a good decision as opposed to being rushed into a decision.

Yeah, exactly.

Is there any parting advice that you have for our listeners of what they can do to be more resilient against scams, or have we covered it all?

I think we've covered a lot of it. I think we tend to be overconfident about our ability to handle it in the moment. The more that we can slow things down in the moment, reduce cognitive load, etc. I think we've covered a lot of the tactics for protecting yourself. But I think the other piece that I always find really important to stress is realizing that because it is so hard in the moment, we should probably judge other people and ourselves less harshly when they or we do fall prey to these things. Like, yes, take every precaution you can to try to avoid it. It's a great idea.

I think the other piece that I always find really important to stress is realizing that because it is so hard in the moment, we should probably judge other people and ourselves less harshly when they or we do fall prey to these… Share on X

It's great to be listening to this podcast, you know, accumulating these tips, but that doesn't make you sort of bulletproof, and it doesn't make other people bulletproof. I think we also have to give ourselves a little bit of grace. There's been all these articles, like assume you're going to get hacked, assume these things are going to happen, do your best to prevent it. But then, like, give yourself another's grace if it does happen.

I think the expression of those often use it's not if something is going to happen, but when something is going to happen, what do you do, whether it's being hacked or being scammed? I've had so many guests on that are experts in their particular realm that have become a victim of even the scam that they are telling everybody to be careful of because of all the things that we just talked about.

Or it's just, like, all stars align and it's just the right timing. It's just the right context of you got a message from what you thought was your boss at the right time and the right circumstances. It's a very plausible reason, not an unreasonable thing, not unexpected. But so often we talk about, “Ah, watch out for the unexpected. Watch out for things that are on the fringe and outside.” But when it perfectly lines up with what we expect, it's really hard to not catch it in the process.

You've got a couple of books. What are those books and where can they find them?

My first book was You Have More Influence Than You Think, and it deals with a lot of these issues and the idea that these simple persuasive tactics, that we can use them more effectively than we tend to realize, but also that because of that, we have to be more responsible with them. My second book, which is coming out in October, is called Should I Say Something? Should get the title right there.

So Should I Say Something?, and it's basically if my first book was like, you have all this influence; use it responsibly. This one is like, “OK, so what does that look like? What should I say? What shouldn't I say?” And it really gets more into these specific sort of dilemmas we face about whether or not we should bring something up, whether it's, like, “What should I apologize for, and what do I not need to apologize for? When should I be honest with someone that they've done something wrong or that their performance is subpar? When should I let it go?” It's sort of questions like that. They're both on Amazon, Barnes & Noble, everywhere books are sold, and on my website as well, vanessabohns.com.

Is there anything in Should I Say Something? which would apply to if you have a family member that you think is being scammed?

That's a great question. One of the sort of takeaways from Should I Say Something? in particular, the chapter on whether you should be honest and give somebody honest feedback is it really depends on whether you think that saying something is going to be helpful in the future as opposed to just critical of something that happened in the past.

If someone was a victim of an attack and you're like, “Oh, man, it's because they didn't do X, Y and Z.” You don't want to tell them, like, “Yeah, that's because you didn't do X, Y and Z.” You want to, if you think, though, that this could happen again in the future, you would want to say, “OK, let's make sure this never happens again.” You want it to always be future-focused. And you say, “OK, looking forward, when I'm going to talk about what happened in the past, let's make sure this is set up so that you never have to go through this kind of thing again.”

There's really no point in saying something because it comes across as just critical and it's painful for both people. But when there can be sort of a future benefit to being honest about something and direct about something,… Share on X

It really is about there's times when what's done is done. There's really no point in saying something because it comes across as just critical and it's painful for both people. But when there can be sort of a future benefit to being honest about something and direct about something, that's when it's most beneficial. Then you should say something. But it's also a way of framing that feedback so that both people are, find it less unpleasant. It's easier to give when you're being helpful for the future. It's easier to take when it doesn't feel like you're being criticized for the past.

Yeah. No, no one wants to feel like they're being attacked.

Exactly. Yeah.

They're going to defend themselves regardless of the intentions.

Awesome. If people want to connect with you and want to learn more about the research, where can they find you?

They can find me on my website. I have contact information, vanessabohns.com. I'm also on LinkedIn. I'm on Instagram and Bluesky and Twitter. All of them are @profbohns.

Awesome. We will make sure to link to all those in the show notes and the books as well. Thank you so much for coming on the podcast today.

Thank you so much for having me. It's really interesting.

About Your Host

Chris Parker

Chris Parker is the founder of WhatIsMyIPAddress.com, a tech-friendly website attracting a remarkable 13,000,000 visitors a month. In 2000, Chris created WhatIsMyIPAddress.com as a solution to finding his employer’s office IP address. Today, WhatIsMyIPAddress.com is among the top 3,000 websites in the U.S. 

Share Post:

COULD YOU BE EASY PREY?

Take the Easy Prey
 Self-Assessment.

YOU MAY ALSO LIKE

Dawn
Dines

Drink Spiking

Sharon
Armstrong

Love, Lies and Locked Up

Stacie
Bosley

The Recruitment Trap

Tom
Cross

Convincing Deepfakes

Sherrod
DeGrippo

When Trust Becomes a Trap

PODCAST reviews

Excellent Podcast

Chris Parker has such a calm and soothing voice, which is a wonderful accompaniment for the kinds of serious topics that he covers. You want a soothing voice as you’re learning about all the ways the bad guys out there are desperately trying to take advantage of us, and how they do cleverly find new and more devious ways each day! It’s a weird world out there! Don’t let your guard down, this podcast will give you some explicit directions!

MTracey141

Required Listening

Somethings are required reading – this podcast should be required listening for anyone using anything connected in the current world.

Apple Podcasts User

Fascinating stuff!

I’ve listened to quite of few of these podcasts now. Some of the topics I wouldn’t have given a second look, but the interviewees have always been very interesting and knowledgeable. Fascinating stuff!

Apple Podcasts User

Excellent Show

Excellent interview. Don’t give personal information over the phone … it can be abused in countless ways

George Jenson

Interesting

I’ve listened to quite of few of these podcasts now. Some of the topics I wouldn’t have given a second look, but the interviewees have always been very interesting and knowledgeable. Fascinating stuff!

User22

Content, content, content!

Chris provides amazing content that everyone needs to hear to better protect themselves and learn from other’s mistakes to stay safe!

CaigJ3189

New Favorite Podcast!

Entertaining, educational and I cannot 
get enough! I am excited for more phenomenal content to come and this is sthe only podcast I check frequently to see if a new episode has rolled out.

brandooj

Big BIG ups!

What Chris is doing with this podcast is something that isn’t just desirable, but needed – everyone using the internet should be listening to this! Our naivete is constantly being used against us when we’re online; the best way to combat this is by arming the masses with the information we need to stay wary and keep ourselves safe. Big, BIG ups to Chris for putting the work in for us.

Riley

As seen on

COULD YOU BE EASY PREY?

Take the Easy Prey Self-Assessment.
close

Copy and paste this code to display the image on your site

Privacy Policy

Your privacy is important to us. To better protect your privacy we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on every page of our site.

The Way We Use Information

We use email addresses to confirm registration upon the creation of a new account.

We use return email addresses to answer the email we receive. Such addresses are not used for any other purpose and are not shared with outside parties.

On occasion, we may send email to addresses of registered users to inform them about changes or new features added to our site.

We use non-identifying and aggregate information to better design our website and to share with advertisers. For example, we may tell an advertiser that X number of individuals visited a certain area on our website, or that Y number of men and Z number of women filled out our registration form, but we would not disclose anything that could be used to identify those individuals.

Finally, we never use or share the personally identifiable information provided to us online in ways unrelated to the ones described above.

Our Commitment To Data Security

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

Affiliated sites, linked sites, and advertisements

CGP Holdings, Inc. expects its partners, advertisers, and third-party affiliates to respect the privacy of our users. However, third parties, including our partners, advertisers, affiliates and other content providers accessible through our site, may have their own privacy and data collection policies and practices. For example, during your visit to our site you may link to, or view as part of a frame on a CGP Holdings, Inc. page, certain content that is actually created or hosted by a third party. Also, through CGP Holdings, Inc. you may be introduced to, or be able to access, information, Web sites, advertisements, features, contests or sweepstakes offered by other parties. CGP Holdings, Inc. is not responsible for the actions or policies of such third parties. You should check the applicable privacy policies of those third parties when providing information on a feature or page operated by a third party.

While on our site, our advertisers, promotional partners or other third parties may use cookies or other technology to attempt to identify some of your preferences or retrieve information about you. For example, some of our advertising is served by third parties and may include cookies that enable the advertiser to determine whether you have seen a particular advertisement before. Through features available on our site, third parties may use cookies or other technology to gather information. CGP Holdings, Inc. does not control the use of this technology or the resulting information and is not responsible for any actions or policies of such third parties.

We use third-party advertising companies to serve ads when you visit our website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you. For information about their specific privacy policies please contact the advertisers directly.

Please be careful and responsible whenever you are online. Should you choose to voluntarily disclose Personally Identifiable Information on our site, such as in message boards, chat areas or in advertising or notices you post, that information can be viewed publicly and can be collected and used by third parties without our knowledge and may result in unsolicited messages from other individuals or third parties. Such activities are beyond the control of CGP Holdings, Inc. and this policy.

Changes to this policy

CGP Holdings, Inc. reserves the right to change this policy at any time. Please check this page periodically for changes. Your continued use of our site following the posting of changes to these terms will mean you accept those changes. Information collected prior to the time any change is posted will be used according to the rules and laws that applied at the time the information was collected. 

COULD YOU BE EASY PREY?

Take the Easy Prey Self-Assessment.

We will only send you awesome stuff!