As a VBO Tickets client, your team plays a key role in safeguarding patron data — especially when handling payment information or accessing the CRM. Social engineering is a common tactic used by attackers to trick users into giving up sensitive information or access.

Here’s how to spot it — and what to do.

What Is Social Engineering?

Social engineering is when someone pretends to be a trusted person (like a coworker, IT support, or even a VBO representative) to try to trick you into:

  • Sharing login credentials

  • Providing credit card or patron data

  • Resetting access controls

  • Clicking a malicious link

Common Tactics to Watch For

Tactic
What It Might Look Like
Phishing Emails
“Your VBO access is expiring — click here to log in and verify your credentials.”
Impersonation Calls
“Hi, I'm from VBO Support. Can you verify your admin password so I can troubleshoot your account?”
Urgent Requests
“We need a refund issued immediately to avoid chargebacks. Can you give me the patron’s credit card details?”
Fake Links or Logins
A login screen that looks like VBO but is hosted on a fake domain

How to Stay Safe

  • Never share your password with anyone — even VBO staff.

  • Only log in through the official VBO portal.

  • Verify unexpected requests by contacting the VBO support team directly via your known channels.

  • Don’t store or write down credit card info. Enter it directly into the secure payment gateway.

  • Use strong passwords and enable MFA (Multi-Factor Authentication) where possible.

  • Report suspicious activity immediately — even if you're not sure.

Reminder: You Handle Sensitive Data

As a user of the VBO CRM and payment tools, you may have access to:

  • Patron contact and order history

  • Payment transactions (view-only)

  • Manual entry tools for phone/in-person credit card transactions

Your team is responsible for entering this data securely — and never transmitting card details via email, notes, or unsecured platforms.

Need Help or See Something Suspicious?

If you think someone is impersonating support or trying to gain access improperly:

  • Do not respond

  • Do not click links or download attachments

  • Contact VBO Tickets Support directly at support@vbotickets.com