The Consumer Is the New Intelligence Target

There is a particular type of professional who spends their career studying human vulnerability. Not in the clinical sense, though the methods overlap. In the operational sense. Which pressures cause people to act against their own interests. Which emotional states reduce skepticism. Which relationships can be leveraged to reach a target who would otherwise be inaccessible. How to create, over time, the conditions under which a person will do something they would not otherwise do.

For most of modern history, that expertise lived in a specific set of institutional contexts. Intelligence services. Organized criminal enterprises. Sophisticated state-sponsored actors running influence operations. The resources required to develop and deploy those methods at scale were substantial enough that their use against ordinary individuals was rare. The average consumer was not worth the investment.

That calculus has changed. Not because ordinary consumers have suddenly become strategically important to nation-states, but because the methods themselves have become accessible enough that the investment required to deploy them is no longer a meaningful barrier.

The consumer is now the intelligence target. Not metaphorically. Operationally.

What Intelligence Targeting Actually Means

The term intelligence targeting gets used loosely enough that it is worth being precise about what it means in practice, and why the comparison to consumer fraud is not rhetorical flourish.

Intelligence targeting begins with research. Before any approach is made, information is collected about the subject. Their relationships. Their financial circumstances. Their emotional state and recent life events. Their routines and behavioral patterns. Their vulnerabilities, understood not as character flaws but as conditions under which they are more susceptible to influence than they would otherwise be.

That research informs the approach. Who makes the initial contact, and in what role. What relationship is claimed or constructed. What story is told, and how it is sequenced to build credibility before the ask arrives. How urgency is introduced, and at what point in the relationship development.

The approach is then managed over time. Trust is built deliberately, at a pace calibrated to the target. Emotional investment is cultivated. Objections are anticipated and addressed. The moment of maximum susceptibility, when the target is most invested and least skeptical, is identified and used.

Every element of that sequence is present in sophisticated consumer fraud today. The research phase. The persona construction. The relationship development. The timing of the ask. The management of objections. The exploitation of emotional state. Romance fraud, in particular, follows this template with a fidelity that would be recognizable to anyone trained in intelligence operations. The difference is the target and the outcome, not the method.

The Data Exhaust Problem

Intelligence operations targeting individuals have historically required significant collection effort. Building a profile of a private person, understanding their relationships and vulnerabilities, required access to information that was genuinely difficult to obtain. Physical surveillance. Source recruitment. Technical collection. These methods were expensive, legally constrained, and limited in scale.

The consumer internet solved the collection problem. Not intentionally, and not in a way that most people who contributed to it understood they were contributing to. But the aggregate effect is that the average person living a connected life has generated an intelligence profile of themselves that would have been the envy of any collection operation a generation ago.

Social media alone provides a continuously updated window into a person’s emotional state, relationships, financial milestones, anxieties, aspirations, and daily patterns. A post announcing a new home. A comment expressing financial stress. A photograph from a location that contradicts a claimed schedule. A relationship status change. A grieving post following a loss. Each is a data point. Assembled over time across multiple platforms, they produce a profile of depth and currency that no static database can match.

Public records layer additional dimensions. Property ownership and transaction history. Court filings and legal matters. Business registrations and financial disclosures. Professional licenses. Probate records following a death in the family. These sources require no technical sophistication to access and in many jurisdictions carry no legal restriction on their use.

Data obtained through breaches adds what the open internet cannot provide directly: account numbers, authentication credentials, financial history, and in the largest incidents, the kind of longitudinal personal data that maps a person’s financial life across decades. The National Public Data breach, estimated at two to three billion records, included family relationship data built from decades of address history. A targeting operation using that data can map not just the individual but their extended family, their geographic history, and the relationships most likely to be exploitable as emotional leverage.

The person approaching a consumer with a sophisticated fraud scheme knows things about them before first contact. In many cases, they know more than the target would expect any stranger to know, and that knowledge is precisely what makes the approach feel like something other than a cold contact from someone with unknown motives.

Visibility as a Selection Criterion

Not every consumer is equally exposed. Targeting research begins somewhere, and the starting point is almost always visibility. People who are findable, whose circumstances are inferable from public sources, and whose profile suggests sufficient return to justify the approach are the ones who get approached.

Visibility in this context is not primarily about fame or public profile. It is about the density and accessibility of information available about a person. Someone who is active on social media, owns property, holds a professional license, has made public business filings, appears in news coverage, or has participated in community activities that generated public records is more visible than someone who has not. That visibility creates an exposure surface that can be researched, analyzed, and acted upon.

High-visibility individuals, executives, athletes, public figures, business owners with identifiable assets, individuals who have recently experienced significant financial events, are visible in ways that make the investment of targeting research economically rational for sophisticated operators. But the threshold is lower than most people assume. A recently announced home purchase. A new job at a publicly traded company. An obituary that mentions surviving family. A LinkedIn profile listing career transitions. Any of these can be the entry point for a targeting research process that produces an approach calibrated to that specific person.

The assumption that one is not visible enough to be worth targeting is one of the most consequential misunderstandings in personal security. Targeting does not require fame. It requires findability, and most people are considerably more findable than they realize.

Emotional Engineering at Scale

If research is the intelligence phase of consumer targeting, emotional engineering is the operational phase. It is where the information collected is translated into an approach designed to produce a specific behavioral outcome.

Urgency is the most commonly observed emotional lever. A threat that requires immediate action. A limited-time opportunity that will not wait. A crisis that must be resolved before the target has time to consult anyone else. Urgency is effective not because people are irrational under pressure but because the cognitive systems that evolved to handle genuine emergencies are poorly calibrated to detect manufactured ones. When something feels urgent, deliberation is the enemy of survival. The brain is designed to act, and sophisticated fraud exploits that design.

Fear operates similarly. The IRS impersonation call that threatens immediate arrest. The bank security alert that requires immediate account verification. The legal notice that demands action before a deadline. Fear compresses the decision window and raises the cost of inaction in ways that override the skepticism a calmer state would produce. The targets of these approaches are not failing to think. They are thinking in the way human beings think under perceived threat, and that is exactly what the design intends.

Affection and trust, cultivated deliberately over time, produce a different kind of vulnerability. The romance fraud victim who has spent months building what feels like a genuine relationship with a person who has expressed care, interest, and emotional attunement is not naive. They are responding to signals of connection that human beings are wired to value. The fraud works not despite that wiring but because of it. Manufactured intimacy, sustained long enough, produces genuine emotional investment that is as real in its effects as any organic relationship. When the financial request arrives, it arrives inside a relationship that the victim has every reason to believe is real.

Platform-Based Reconnaissance

Social platforms are not simply sources of data for targeting research. They are the environments in which targeting operations are conducted. The platforms provide infrastructure: communication channels, identity presentation tools, audience-building mechanisms, and in some cases algorithmic recommendation systems that actively facilitate introductions between strangers.

A wrong-number text that quickly becomes a warm conversation. A connection request from a credible professional profile with mutual connections. A comment that initiates an exchange in a public forum. These entry points are not random. They are informed by the research phase and calibrated to the target’s platform behavior and apparent receptivity.

The platforms themselves have invested in detection and disruption. The joint operations that disabled more than 150,000 accounts connected to scam compound networks in early 2026 represent genuine enforcement effort that required coordination across multiple jurisdictions and institutions. But the scale of legitimate communication on these platforms creates an inherent signal-to-noise problem that no enforcement operation has yet fully resolved. The volume of genuine human connection on any major platform dwarfs the volume of fraudulent contact. That ratio is protective cover for the latter.

The Line That No Longer Exists

For most of the modern era, there was a meaningful distinction between the threat environment faced by private individuals and the threat environment faced by institutions, governments, and high-value targets of organized adversarial operations. Private individuals faced opportunistic fraud. Institutions faced sophisticated, resourced, persistent adversaries.

That distinction has eroded to the point where it no longer provides the conceptual clarity it once did.

The methods used against consumers in romance fraud, investment fraud, and targeted social engineering are the methods of intelligence operations applied at consumer scale. The research phase, the persona construction, the relationship development, the emotional calibration, the timing of the ask. These are not crude imitations of sophisticated tradecraft. They are the same tradecraft, adapted to a different target population and made scalable by the same AI capabilities examined in the previous chapter.

A consumer who understands this is in a fundamentally different position than one who does not. Not because the understanding prevents every attack, but because it changes the frame through which incoming approaches are evaluated. The question shifts from whether something seems suspicious to whether the conditions for manipulation are present. Whether urgency has been manufactured. Whether emotional investment has been cultivated in a direction that serves someone else’s interest. Whether the information someone appears to have about you was something they could plausibly know, or whether it suggests research that precedes the approach.

Those are the questions intelligence analysts ask about their own operating environments. They are now the appropriate questions for anyone navigating a connected world.