Social Engineering for Good – IEEE Spectrum

“Social engineering” sounds like something out of a conspiracy thriller, dealing with totalitarian control and fringe paranoia. Often, it has become associated with phishing and other scams, where fraudsters trick people into revealing personal information.

Yet the concept is old and very good: it is the deliberate shaping of human behavior, often to a degree. It preceded silicon—and it spread, and was not controlled, especially when its experts learned to hide it. Authoritarian regimes and recent fraudsters and big corporations have profited from it. To protect ourselves from bad actors, and benefit from the good side of social engineers, we need to rebrand it, and manage it wisely.

Engineering roots

In 1894, Dutch businessman Jacques van Marken urged companies to employ “social engineers” to manage human values ​​such as insurance, education, and employee profit sharing as carefully as they did machines. Fifteen years later, the reformer William H. Tolman published Social Engineeringdescribing how American industrialists improved working conditions and production methods. If industrialists can shape metal and electricity on demand, why not shape society itself?

By the 1920s, that conviction had spread. The architect Le Corbusier declared that residences were “living machines,” envisioning cities as organized spaces through which people move like parts of a conveyor belt. Civilization would run like a Swiss watch.

Suddenly the mind went dark. Authoritarian regimes went to extremes, promising to create a “New Man.” In Nazi Germany, engineer Fritz Todt founded the Organization Todt, the country’s largest engineering company that developed the autobahn system and later ran concentration camps using slave labor.

In the Soviet Union, leaders adopted US scientific management methods to organize the movement of factory workers and divide people into centralized records, feeding both the drive for rapid industrial growth and the gulag system of forced labor. The same tools and administrative methods used in building highways and making five-year plans were used to suppress and control the masses.

By the 1950s, “social engineering” had become a dirty word. The exposure of Nazi and Soviet abuses, and the Cold War critique of good social planning transformed the term from a progressive slogan to a warning label. Removing the names pushed the practice underground, making it difficult to recognize when it reemerged in new forms—such as organizational psychology and program management that still relied on classification and behavioral influence techniques but under softer, less loaded labels.

Social engineering is very disruptive

In the postwar years, the new lexicon of social engineering included “human factors” and “urban planning,” both promising rather than prescriptive combinations. As computing has advanced, so has the language: “customer journey mapping” to track interactions, “user experience” to document it. Engineering, which began as a means of reshaping the physical environment, set its sights on shaping behavior. The digital design features embedded in our smartphones now direct our attention and desire.

Language helps to hide these modern forms of social engineering. “Data analytics” sounds neutral next to “surveillance.” “Personalization” flatters personality while sorting users into predictable categories. “Ethical drift” directs decisions without a sense of interference. We attach “public” as a positive modifier to science, finance, and the media, but reject it when it comes to “engineering.”

That discomfort is a clue. Engineering means control, and control prompts us to ask who directs whom, to what end, and with whose permission.

Not all social engineering these days is hidden. Hackers don’t need to break a firewall if someone gives out their password. Love scammers cultivate intimacy the way farmers cultivate crops. They did not succeed by force but by using trust. If even this obvious attack works, the invisible kind, rooted in social engineering, is a shoo-in.

Most of the social engineers we meet are proprietary and beyond our control. Firms are developing recommendation algorithms tuned to improve engagement and profitability without a hearing or right to appeal. Browser defaults and cookies determine what data we provide. A single change of gameplay can consume hours of users and create bad habits. These are deliberate acts of engineering such as building a road or redrawing an electoral district. They form a kind of selective bite where boredom never ends, and satisfaction never comes. The results are predictable—users click on targeted ads, make purchases, form habits, and lock ideas.

Permission has changed along with it. Once specific and withdrawn, it is now subtle and persistent, buried in defaults or vague terms of service accepted very quickly. You are always free to go out, just as you are free to turn down roads or electricity. Consent has become the chosen setting of modern life.

The more open social engineering was, the more citizens could compete with it, at least in societies with responsive governments. Today’s invisible version spreads accountability so well that scrutiny becomes difficult to direct. Despite recent congressional hearings on social media and the impact on young people’s mental health and judges agreeing that firms deliberately design algorithms that cause harm, identifying responsibility remains difficult. When a machine is buried in a system that uses billions, we cannot easily pinpoint a single decision maker or trace the exact moment of manipulation.

Today’s civil engineering is less concrete and theatrical than its predecessors. Earlier versions came on public posters and speakers for large audiences. Today’s version is more intimate, delivered through personal devices and a consistent feed tailored to each individual. The model succeeds because participation feels like freedom, not control.

Not all social engineering is dystopian. Well-maintained parks encourage community, accessible buildings increase dignity, policies and seat belts save lives. Even in the digital world, good examples exist: browser extensions that automatically block hidden trackers, search engines that refuse to create personal surveillance profiles, and decentralized social networks that give users greater control over their personal data and feeds.

The term “social engineering” is still confusing, however. But “social” engineering, which ignores human consequences entirely, is far worse. The recognition of the human dimension in engineering is the starting point for improvement. Only by seeing the machines clearly and naming them honestly can we determine who is engineering what and why. Machines will not disassemble themselves. Once it is named, it is subject to choice. That discussion of purpose, power, and process are the defining political questions of any true democracy. We cannot ensure that social engineering helps and supports society as long as we avoid words.