---
title: "Intimidation — AP Cybersecurity Definition & Exam Guide"
description: "Intimidation is a social engineering tactic where an attacker threatens negative consequences to force you to act. Learn how it's tested in AP Cybersecurity Unit 1."
canonical: "https://fiveable.me/ap-cybersecurity/key-terms/intimidation"
type: "key-term"
subject: "AP Cybersecurity"
unit: "Unit 1"
---

# Intimidation — AP Cybersecurity Definition & Exam Guide

## Definition

In AP Cybersecurity, intimidation is a social engineering tactic where an adversary threatens a target with negative consequences (like account deletion or being locked out) if they don't comply, using fear to push the victim into a desired action.

## What It Is

Intimidation is one of the [psychological tactics](/ap-cybersecurity/unit-1/understanding-social-engineering/study-guide/TBmFY733Y9zYkD80i0py "fv-autolink") attackers use in [social engineering](/ap-cybersecurity/key-terms/social-engineering "fv-autolink"). The idea is simple: scare you into acting. An adversary threatens you with a negative consequence (your account gets deleted, your access gets locked, you get in trouble) unless you do what they say right now. That fear short-circuits your judgment.

The CED ties this to a basic fact about people: we naturally want to avoid bad outcomes (EK 1.1.B.2). Attackers [exploit](/ap-cybersecurity/unit-2/cyber-foundations/study-guide/0oS8jJyX7iolYntwz5Eh "fv-autolink") that aversion. By dangling a scary consequence in front of you, they get you to hand over a password, click a malicious link, or download a file before you stop to ask whether the message is even real. Intimidation usually shows up over email, text, or social media, though it can happen in person too.

## Why It Matters

Intimidation lives in [Unit 1](/ap-cybersecurity/unit-1 "fv-autolink"): Introduction to Security, specifically Topic 1.1, Understanding Social Engineering. It supports three learning objectives. [AP Cybersecurity](/ap-cybersecurity "fv-autolink") 1.1.A asks you to identify common indicators of social engineering, and intimidation is one of the named tactics (EK 1.1.A.2). AP Cybersecurity 1.1.B asks you to explain how a tactic influences a victim, and intimidation works by leveraging fear of negative consequences (EK 1.1.B.2). AP Cybersecurity 1.1.C asks you to describe possible impacts, which is exactly what happens when a scared victim hands over a password or clicks a malicious link. Social engineering is foundational. Almost every later attack starts with a human being manipulated first.

## Connections

### [Urgency (Unit 1)](/ap-cybersecurity/key-terms/urgency)

Intimidation and [urgency](/ap-cybersecurity/key-terms/urgency "fv-autolink") are the two tactics the CED names side by side, and attackers love to combine them. Intimidation supplies the threat (your account will be deleted), and urgency supplies the clock (within two hours). Fear plus a deadline is a one-two punch that stops you from thinking.

### [Phishing (Unit 1)](/ap-cybersecurity/key-terms/phishing)

Intimidation is the psychological lever; [phishing](/ap-cybersecurity/key-terms/phishing "fv-autolink") is the delivery method. A phishing email that says 'your bank account will be closed unless you verify now' is using intimidation as its engine. The tactic explains why the phishing message works.

### [Authority (Unit 1)](/ap-cybersecurity/key-terms/authority)

Both rely on pressure, but they pull different strings. [Authority](/ap-cybersecurity/key-terms/authority "fv-autolink") makes you obey because the sender seems important (your boss, the IRS). Intimidation makes you obey because you're afraid of what happens if you don't. Attackers often stack them: a threat that sounds like it comes from someone in charge.

## On the AP Exam

Expect intimidation in multiple-choice 'which tactic is this?' questions. The classic stem describes an email threatening that your account will be deleted, locked, or closed unless you verify a password or click a link, then asks you to name the tactic. Your job is to spot the threat-of-negative-consequence pattern and pick intimidation. Watch the trap: many of these scenarios also include a time limit (within one hour, immediately), which is urgency. Read carefully to see whether the question is testing the threat itself (intimidation) or the deadline (urgency). For free response, be ready to explain WHY the tactic works, not just name it. Intimidation works because humans naturally try to avoid negative consequences, so fear pushes them to act before checking if the request is legit.

## intimidation vs urgency

Intimidation threatens you with a bad outcome (your account will be deleted), using fear. Urgency pressures you with time (you have one hour), using haste. They often appear in the same message, so look at what's doing the work: if the core lever is a threat, it's intimidation; if it's a ticking clock, it's urgency. When a question lists both elements, match it to whichever the answer choices emphasize.

## Key Takeaways

- Intimidation is a social engineering tactic where an attacker threatens negative consequences to force you to comply.
- It works by exploiting a natural human aversion to bad outcomes, so fear gets you to act before you can verify the request.
- Intimidation and urgency are different: intimidation uses a threat, urgency uses a deadline, and attackers often combine both in one message.
- On the exam, the giveaway is a threat phrase like 'your account will be deleted/locked/closed unless you...'
- A successful intimidation attack can lead to a victim handing over a password, a one-time code, or clicking a malicious link.

## FAQs

### What is intimidation in AP Cybersecurity?

Intimidation is a social engineering tactic where an adversary threatens a target with negative consequences if they don't comply. It uses fear of a bad outcome (like losing an account) to manipulate the victim into acting.

### Is intimidation the same as urgency?

No. Intimidation relies on a threat of negative consequences, while urgency relies on time pressure. They show up together often, like an email that says your account will be deleted (intimidation) within one hour (urgency), but they're distinct tactics in the CED.

### How do I tell intimidation from urgency on a multiple-choice question?

Look at the main lever in the scenario. If the core threat is a bad consequence (account locked, deleted, closed), it's intimidation. If the focus is on a deadline that makes you rush (within two hours, immediately), it's urgency.

### Why does intimidation actually work on people?

It works because humans naturally try to avoid negative consequences. By drawing attention to a scary outcome, attackers trigger fear, and fear pushes you to act fast without stopping to check whether the message is real.

### What can happen if I fall for an intimidation attack?

You could hand over personal info, a one-time password or login code, or download malware by clicking a malicious link. That can let an adversary impersonate you or log in to your accounts as you.

## Related Study Guides

- [1.1 Understanding Social Engineering](/ap-cybersecurity/unit-1/understanding-social-engineering/study-guide/TBmFY733Y9zYkD80i0py)

## Structured Data

```json
{"@context":"https://schema.org","@graph":[{"@type":"LearningResource","@id":"https://fiveable.me/ap-cybersecurity/key-terms/intimidation#resource","name":"Intimidation — AP Cybersecurity Definition & Exam Guide","url":"https://fiveable.me/ap-cybersecurity/key-terms/intimidation","learningResourceType":"Concept explainer","educationalLevel":"AP® / High School","about":{"@id":"https://fiveable.me/ap-cybersecurity/key-terms/intimidation#term"},"audience":{"@type":"EducationalAudience","educationalRole":"student"},"dateModified":"2026-06-15T18:59:26.675Z","isPartOf":{"@type":"Collection","name":"AP Cybersecurity Key Terms","url":"https://fiveable.me/ap-cybersecurity/key-terms"},"publisher":{"@type":"Organization","name":"Fiveable","url":"https://fiveable.me"}},{"@type":"DefinedTerm","@id":"https://fiveable.me/ap-cybersecurity/key-terms/intimidation#term","name":"intimidation","description":"In AP Cybersecurity, intimidation is a social engineering tactic where an adversary threatens a target with negative consequences (like account deletion or being locked out) if they don't comply, using fear to push the victim into a desired action.","url":"https://fiveable.me/ap-cybersecurity/key-terms/intimidation","inDefinedTermSet":{"@type":"DefinedTermSet","name":"AP Cybersecurity Key Terms","url":"https://fiveable.me/ap-cybersecurity/key-terms"},"educationalAlignment":[{"@type":"AlignmentObject","alignmentType":"educationalSubject","educationalFramework":"AP® Course and Exam Description","targetName":"AP Cybersecurity Unit 1, Topic 1.1, LO 1.1.A"},{"@type":"AlignmentObject","alignmentType":"educationalSubject","educationalFramework":"AP® Course and Exam Description","targetName":"AP Cybersecurity Unit 1, Topic 1.1, LO 1.1.B"},{"@type":"AlignmentObject","alignmentType":"educationalSubject","educationalFramework":"AP® Course and Exam Description","targetName":"AP Cybersecurity Unit 1, Topic 1.1, LO 1.1.C"}]},{"@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What is intimidation in AP Cybersecurity?","acceptedAnswer":{"@type":"Answer","text":"Intimidation is a social engineering tactic where an adversary threatens a target with negative consequences if they don't comply. It uses fear of a bad outcome (like losing an account) to manipulate the victim into acting."}},{"@type":"Question","name":"Is intimidation the same as urgency?","acceptedAnswer":{"@type":"Answer","text":"No. Intimidation relies on a threat of negative consequences, while urgency relies on time pressure. They show up together often, like an email that says your account will be deleted (intimidation) within one hour (urgency), but they're distinct tactics in the CED."}},{"@type":"Question","name":"How do I tell intimidation from urgency on a multiple-choice question?","acceptedAnswer":{"@type":"Answer","text":"Look at the main lever in the scenario. If the core threat is a bad consequence (account locked, deleted, closed), it's intimidation. If the focus is on a deadline that makes you rush (within two hours, immediately), it's urgency."}},{"@type":"Question","name":"Why does intimidation actually work on people?","acceptedAnswer":{"@type":"Answer","text":"It works because humans naturally try to avoid negative consequences. By drawing attention to a scary outcome, attackers trigger fear, and fear pushes you to act fast without stopping to check whether the message is real."}},{"@type":"Question","name":"What can happen if I fall for an intimidation attack?","acceptedAnswer":{"@type":"Answer","text":"You could hand over personal info, a one-time password or login code, or download malware by clicking a malicious link. That can let an adversary impersonate you or log in to your accounts as you."}}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"AP Cybersecurity","item":"https://fiveable.me/ap-cybersecurity"},{"@type":"ListItem","position":2,"name":"Key Terms","item":"https://fiveable.me/ap-cybersecurity/key-terms"},{"@type":"ListItem","position":3,"name":"Unit 1","item":"https://fiveable.me/ap-cybersecurity/unit-1"},{"@type":"ListItem","position":4,"name":"intimidation"}]}]}
```