Skip to main content

Some People Don’t Fall For It. Here’s What Their Brains Are Doing Differently

“You cannot consistently perform in a manner that is inconsistent with the way you see yourself.” — John Maxwell 

She almost did it. The message arrived late on a Tuesday evening. It was written professionally and urgently. It looked just like a message from her bank. Her colleague, sitting next to her, would have clicked without thinking. But not her, she thought. She didn’t recognise a technical warning sign, and she wasn’t any smarter or more tech-savvy. She stopped because she felt something was wrong, and she trusted her instincts enough to pause and check. 

That short, almost unnoticeable hesitation was not luck. It was the result of something that researchers are only just beginning to understand: a strong sense of self-knowledge that allows us to recognise when others were trying to influence our thoughts. 

We’ve spent a lot of time in our recent articles examining: 

All of that is still true and important. But there is one question we haven’t asked yet. What makes people who resist different? Not the people who are lucky, or who are naturally suspicious, or always paranoid. The people who, when feeling stressed and upset, still manage to stop and think. What do they have that others don’t? 

I bet you that the answer to that question is not what most people expect. 

The Intelligence Assumption Is Wrong 

Many people incorrectly assume that being able to resist manipulation is a sign of high intelligence. People who are smart shouldn’t get scammed, right? If you were tricked, it’s because you were naive, careless, or just not smart enough, right? 

A major review of research published on critical thinking, intelligence, and unsubstantiated beliefs in the Journal of Intelligence found that people who aren’t easily fooled or influenced by others are not necessarily more intelligent. They are more likely to think critically and use rational, analytical thought processes rather than intuitive, experiential ones. Intelligence, as measured by standardised tests, and manipulation resistance are genuinely different concepts. Having a high IQ doesn’t necessarily make you safe. A rational person is used to stopping, thinking, and asking questions. 

This difference is very important! Intelligence is mostly fixed, but how you think is not. It’s a reaction that can be trained. 

So, what makes a rational person feel that way? What makes certain people think logically when everyone around them is reacting emotionally? The answer isn’t about how clever someone is, but how well they know themselves. 

The Neuroscience of Knowing Who You Are 

The term “self-concept clarity” (SCC) comes from social psychology and refers to how well a person’s sense of identity matches the idea of themselves in their head, how consistent it is, and how stable it is across different situations. People who know themselves well understand what they value, how they usually react, and what feels strange to them. They know themselves well, but they’re not set in their ways. When something tries to distract them from thinking for themselves, they notice the difference. 

The results of the research are very surprising. A 2019 study published in the Personality and Social Psychology Bulletin found that people who have a less clear sense of who they are, were more likely to be influenced by how others see them. This is about illusions where what is happening around them changes what they think is real. If your sense of self is less defined, you become easier to steer when pressure is applied 

Now, let’s look at how digital manipulation works: A scammer is not just trying to get information from you; they are trying to change how you think. They want you to believe, even for a short time, that the urgency is real, that the voice is genuine, and that the authority is legitimate. The goal is to change how you think. So, if your sense of self is already unclear or easily affected, that override is much easier to achieve. 

Research into the brain by Monti and colleagues in 2021 has shown that people who are more in touch with their own bodily signals, or have high “interoceptive accuracy” in research speak, are more stable in SCC. They are also less susceptible to external pressure that pushes them toward actions that feel out of character. The brain’s internal signals act like a compass, helping us to stay on course. When they are in tune, they help to keep our sense of who we are. If you don’t pay attention, you’re left exposed. 

Psychological Capital: The Trainable Architecture of Resilience 

In 2006, Luthans and his team published an important framework in positive psychology: Psychological Capital (PsyCap). Their work found four main psychological states that together can predict how well someone will perform, how they will feel, and, most importantly, how they will cope when under pressure. 

Those four states are self-efficacy, optimism, hope, and resilience. Not as ideas, but as skills that can be developed. PsyCap is defined as an individual’s positive psychological state of development characterised by confidence to take on challenging tasks, a positive attitude about succeeding, the ability to redirect towards goals when obstacles arise, and the capacity to overcome difficulties and continue working hard. 

The discovery that changes everything: PsyCap is not a fixed trait. It is more like a way of thinking than a personality trait that is fixed, which means it can be deliberately developed and improved. Luthans and his team showed this through short, specific actions called PsyCap Interventions (PCIs) that led to clear improvements in all four parts. 

What does this mean when we’re talking about how to stop digital manipulation? Someone with high PsyCap is not just emotionally stronger in general. They are more confident in uncertain circumstances. More likely to consider problems as caused by external factors rather than by something they have done wrong. They keep going towards their goals even when they are stressed. And they get over difficult experiences quickly. These are exactly the psychological qualities that make a person harder to manipulate. 

A social engineering attempt is basically a pressure campaign. It makes people feel like they need to do something straight away. PsyCap doesn’t make you immune to pressure. It gives you enough of its own resources.  

What the Personality Research Actually Shows 

Researchers have tried hard to find out which personality traits are a sign of someone being more likely to fall for phishing and social engineering. The findings are more complicated than most people think. 

A 2025 study published in Security Journal by Islam and colleagues found that while certain personality traits influence how likely someone is to fall for a phishing attack, the relationship is more complex than earlier research indicated. The same study also found that people who are extroverted are more likely to fall for phishing attempts. This is because extroverts are naturally attuned to social cues and more likely to respond to them, and digital manipulation is specifically engineered to trigger that responsiveness, turning a social strength into a point of vulnerability. 

This is a reminder that the picture is not simply “emotionally stable people are protected.” The situation, the type of attack, and the details of what is being targeted all matter. 

Research into personality consistently shows that it is a weak predictor. A 2025 study by Muhanad and colleagues said that personality doesn’t have as much of an effect on how likely someone is to be tricked into giving away personal information as earlier studies suggested. The better predictors are how you think and your personality, not your personality type. This means that what can be trained is more important than what cannot be changed. 

The Mindfulness Finding That Changes the Conversation 

Perhaps the most underappreciated finding in the research landscape is the relationship between mindfulness training, cognitive control, and resistance to manipulation. 

A 2019 controlled and randomised study by Quaglia and colleagues found that just four twenty-minute sessions of mindfulness training could make a measurable improvement in cognitive control in situations involving emotions. Participants who had practised mindfulness showed better top-down, goal-driven attention when faced with social situations designed to elicit automatic emotional reactions. 

Let that sit for a moment. Digital manipulation is a social situation that is designed to make people feel certain emotions automatically: fear, urgency, shame, and even excitement. The automatic reaction is the way they attack. A short mindfulness course, based on scientific evidence, made people better at controlling their reactions. 

A 2013 study by Farb and his team, used an fMRI scan to map out the neuroscience behind this finding. They found that mindfulness training altered brain activity in a part of the brain involved in processing bodily signals and the outside world and reduced automatic activity in another part of the brain during tasks requiring attention to internal states. In simple terms, people who had been trained showed better integration of their own feelings with what was happening around them, rather than being overwhelmed by what was going on around them. 

This is connected to having a clear sense of self. If you are more in tune with your feelings, you will have a stronger sense of who you are and be less likely to be influenced by others. 

The key idea that keeps coming up in all this research is that of groundedness. You know what you feel, you trust what you know, and you have the emotional strength to deal with the discomfort of stopping when everything around you is moving. 

What You Can Actually Build 

This is where the conversation moves from being interesting to being useful. This is because neither SCC, PsyCap, nor mindfulness-based cognitive control are fixed. They get better the more you practice. 

You don’t need to go to therapy to become more aware of who you are. It starts with looking closely at yourself and thinking about specific things rather than vague ideas. It’s not about having all the answers, but being able to describe your own patterns, values, and likely responses in detail. Writing down your thoughts and values, doing exercises to work out what is important to you, and just being aware of how you react in stressful situations can help you understand yourself better. 

Building PsyCap is all about practising specific skills. The PsyCap Intervention research points to four areas: setting specific goals and planning how to achieve them (hope), building a track record of small wins in challenging tasks (efficacy), seeing setbacks as external and temporary rather than personal and permanent (optimism), and deliberately thinking about how you have recovered from difficulty in the past (resilience). These are not ideas to motivate you. They are organised psychological exercises with clear results. 

There is now a lot of evidence that brief, consistent mindfulness practice can help people to control their thoughts and actions when they are under social pressure. In the study mentioned above, it took just 20 minutes, four times, to produce noticeable changes in the brain and behaviour. This is not a wellness add-on. It is a skill that can be learnt. 

At Cyber Dexterity, we believe that resilience is not a personality trait that you either have or don’t have. It is infrastructure. And, like all infrastructure, it needs to be built carefully. 

The Question Has Always Been Wrong 

We have spent years asking, “Are you smart enough to not fall for it?” The research says that is the wrong question. The important questions are: how well do you know yourself and your psychological resources? Can you handle pressure without panicking? 

The people who resist manipulation are not smarter. They are more down-to-earth, have a strong sense of who they are, and react to problems when someone tries to change them. They have the mental strength to reflect, even when they feel pressured to act quickly. They have a good enough understanding of their internal landscape that they notice when they are being taken off it. 

In a world where AI is making it possible to manipulate information on a scale never seen before and personalising everything, the best protection is not a better spam filter. It is a clearer, more stable, and more confident sense of self. 

Anyone can build that. The first step is to understand that the target has never just been your data. It has always been who you are. 

Taryn-Lee Potgieter – Head of Brand Growth | Psychology student at SACAP

References 

Bensley, D. A. (2023). Critical Thinking, Intelligence, and Unsubstantiated Beliefs: An Integrative Review. Journal of Intelligence, 11(11), 207. https://doi.org/10.3390/jintelligence11110207  
Campbell, J. D., Trapnell, P. D., Heine, S. J., Katz, I. M., Lavallee, L. F., & Lehman, D. R. (1996). Self-concept clarity: Measurement, personality correlates, and cultural boundaries. Journal of Personality and Social Psychology, 70(1), 141–156. https://doi.org/10.1037/0022-3514.70.1.141  
Farb, N. A. S., Segal, Z. V., & Anderson, A. K. (2013). Mindfulness meditation training alters cortical representations of interoceptive attention. Social Cognitive and Affective Neuroscience, 8(1), 15–26. https://doi.org/10.1093/scan/nss066  
Islam, A., Rashid, M. M., Othman, F., Kaosar, M. G., & Islam, L. (2025). Identifying personality traits associated with phishing susceptibility. Security Journal, 38(1), 18. https://doi.org/10.1057/s41284-025-00466-4  
Krol, S. A., Thériault, R., Olson, J. A., Raz, A., & Bartz, J. A. (2020). Self-Concept Clarity and the Bodily Self: Malleability Across Modalities. Personality and Social Psychology Bulletin, 46(5), 808–820. https://doi.org/10.1177/0146167219879126  
Luthans, F., Avey, J., Avolio, B., Norman, S., & Combs, G. (2006). Psychological Capital Development: Toward a Micro-Intervention. Department of Management: Faculty Publications. https://digitalcommons.unl.edu/managementfacpub/146  
Luthans, F., Vogelgesang, G. R., & Lester, P. B. (2006). Developing the Psychological Capital of Resiliency. Human Resource Development Review, 5(1), 25–44. https://doi.org/10.1177/1534484305285335  
Monti, A., Porciello, G., Panasiti, M. S., & Aglioti, S. M. (2022). The inside of me: Interoceptive constraints on the concept of self in neuroscience and clinical psychology. Psychological Research, 86(8), 2468–2477. https://doi.org/10.1007/s00426-021-01477-7  
Muhanad, A., Abuelezz, I., Haris, R., Khan, K. M., & Ali, R. (2025). Personality traits as predictors of vulnerability to persuasion in social engineering amongst risk-aware targets. Computing, 107(8), 168. https://doi.org/10.1007/s00607-025-01521-z  
Polydorou, B. (2026, January 30). Why People Still Fall for Cyber Scams. Cyber Dexterity. https://cyberdexterity.com/articles/why-people-still-fall-for-cyber-scams/  
Potgieter, T.-L. (2026, February 6). How cognitive overload and multitasking undermine our ability to spot cyber deception. Cyber Dexterity. https://cyberdexterity.com/articles/understanding-cognitive-overload-cyber-deception/  
Quaglia, J. T., Zeidan, F., Grossenbacher, P. G., Freeman, S. P., Braun, S. E., Martelli, A., Goodman, R. J., & Brown, K. W. (2019). Brief mindfulness training enhances cognitive control in socioemotional contexts: Behavioral and neural evidence. PLoS ONE, 14(7), e0219862. https://doi.org/10.1371/journal.pone.0219862  

Subscribe to the Cyber Dexterity NewsRoom?

Receive updates, articles and fresh insights from Tony’s Blog Theme – “My Two Cents Worth.”