Phishing and social engineering attacks are the main forms of cyber risks that aim to steal passwords, financial information, and personal data by deceiving targeted or general users. To prevent these attacks, two-factor authentication, awareness training, and verifying suspicious links are essential