Social engineering relies on human weaknesses, not just tech flaws. Principles like authority, urgency, and trust are key tools for attackers to elicit information or prompt actions.