Social Engineering for Good – IEEE Spectrum

“Social Engineering” reads like a conspiracy thriller, loaded with totalitarian control and fringe paranoia. More mundanely, this is now associated with phishing and other scams, in which fraudsters manipulate people into divulging personal information.

Yet the concept is older and more innocuous: it is the deliberate engineering of human behavior, often on a large scale. It predates silicon and became ubiquitous and ungoverned, especially once its practitioners learned to hide it. Authoritarian regimes and more recently crooks and big businesses have taken advantage of this. To defend ourselves from bad actors and benefit from the good things about social engineering, we must reclaim this name and govern it carefully.

The roots of engineering

In 1894, Dutch entrepreneur Jacques van Marken urged businesses to hire “social engineers” to manage human systems such as insurance, education, and worker profit-sharing as carefully as mechanical systems. Fifteen years later, reformer William H. Tolman published Social engineeringdescribing how American manufacturers optimized worker conditions alongside manufacturing methods. If manufacturers could shape steel and electricity on demand, why not society itself?

By the 1920s, this confidence had become widespread. Architect Le Corbusier said homes were “machines for living,” imagining cities as orderly lattices where people moved like pieces on a conveyor belt. Civilization would work like a Swiss watch.

The idea quickly turned dark. Authoritarian regimes have taken it to the extreme, promising to shape the “new man”. In Nazi Germany, engineer Fritz Todt founded the Todt Organization, a vast state engineering enterprise that grew out of the highway system and later operated concentration camps using slave labor.

In the Soviet Union, leaders adopted American scientific management techniques to plan the movements of factory workers and classify populations through centralized records, fueling both surges of rapid industrialization and the gulag system of forced labor. The same management tools and methods used to build highways and implement five-year plans worked for mass repression and control.

By the 1950s, “social engineering” had become a contaminated term. Revelations of Nazi and Soviet abuses, as well as Cold War critiques of grand social planning, transformed the term from a progressive slogan into a warning label. The banishment of words pushed the practice underground, making it harder to recognize when it resurfaced in new forms, such as organizational psychology and systems management which still relied on classification and behavioral influence techniques, but under gentler, less loaded labels.

The more subtle spread of social engineering

In the postwar years, the new lexicon of social engineering included “human factors” and “urban planning,” all promising integration rather than command. As IT advanced, the language changed again: “customer journey mapping” to track interactions, “user experience” to script them. Engineering, which began as a way to reshape physical space, has focused on shaping behaviors. Digital design features built into our smartphones now target our attention and desire.

Language helps disguise these modern forms of social engineering. “Data analysis” seems neutral next to “monitoring”. “Personalization” flatters individuality while sorting users into predictable categories. “Behavioral nudges” guide decisions without a sense of intrusion. We attach “social” as a favorable modifier to science, capital, and media, but back away when it meets “engineering.”

This discomfort is a clue. Engineering involves control, and control makes us question who directs whom, toward what ends, and with whose permission.

These days, not all social engineering is hidden. Hackers don’t need to break a firewall if someone gives them their password. Romantic scammers cultivate intimacy the same way farmers cultivate their crops. They do not succeed by force but by exploiting trust. Even if these obvious attacks work, invisible attacks, which have their roots in social engineering, are a priority.

Most of the social engineering we face is proprietary and beyond our control. Companies create recommendation algorithms tailored to drive engagement and profits, without audiences or rights of appeal. Default browser and cookie settings determine what data we transmit. A single autoplay toggle can cost users hours and create unhealthy habits. These are acts of engineering as deliberate as building a road or redrawing an electoral district. They create a kind of itch whereby boredom never sets in and satisfaction never arrives. The results are predictable: users click on targeted ads, make purchases, form habits and lock in opinions.

Consent transformed with it. Once simple and revocable, it is now subtle and persistent, buried in defects or opaque conditions of service too quickly accepted. You remain free to withdraw, just as you are free to refuse roads or electricity. Consent has become the privileged framework of modern life.

When social engineering operated more openly, citizens could challenge it, at least in societies with responsive government. Today’s invisible version diffuses responsibility so completely that control becomes difficult to direct. Despite recent congressional hearings on the impact of social media on youth mental health and juries agreeing that companies knowingly design algorithms that cause harm, pinpointing responsibility remains elusive. When the mechanism is buried in a system used by billions of people, it is difficult to identify a single decision-maker or trace the precise moment of manipulation.

Today’s social engineering is less overt and less theatrical than that of its predecessors. Earlier versions arrived on public posters and loudspeakers aimed at mass audiences. Today’s version is more intimate, delivered via personal devices and constant streams tailored to each individual. The model succeeds because participation feels like freedom, not control.

Not all social engineering is dystopian. Well-maintained parks foster community, accessible buildings extend dignity, vaccines and seat belts save lives. Even in the digital realm, positive examples exist: browser extensions that automatically block hidden trackers, search engines that refuse to create personalized monitoring profiles, and decentralized social platforms that give users greater control over their own data and feeds.

The term “social engineering” nevertheless remains destabilizing. But “asocial” engineering, which completely ignores human consequences, is worse. Recognition of the human dimension of engineering is the beginning of repair. Only by seeing the machines clearly and naming them honestly can we decide who designs what and why. The machinery will not be dismantled. Once named, he becomes subject to choice. This negotiation of purpose, power and process constitutes the defining political questions of any true democracy. We cannot ensure that social engineering serves and supports society as long as we avoid words.