Verify, Then Trust (for Authority Claims)
MinutesSeparate the symbols of authority (a title, a uniform, a badge, a confident tone, an official-looking letterhead) from the fact of authority, and check the fact through a source the claimant does not control before you comply.
How to do it
- 1Notice what you are actually responding to. Titles, uniforms, lanyards, jargon, case numbers, and an impatient manner are all cheap to fake; they are evidence that someone wants to be treated as an authority, not that they are one.
- 2Ask two questions, in order. Is this person who they say they are? If so, does their authority actually cover this request? A real doctor has no standing on your investments, and a real police officer cannot order you to withdraw cash.
- 3Check identity through the institution, not the individual: call the agency, company, or department on a published number and ask whether this person works there and whether the visit, call, or letter is genuine. Badge numbers and employee IDs read out by the claimant verify nothing on their own.
- 4Ask for the request in writing, through the institution's normal channel. Genuine authorities have paperwork, reference numbers that the switchboard can look up, and no objection to delay.
- 5At a door or a secure entrance, keep the person outside while you check. In a workplace, escort or refer unknown visitors to reception regardless of how senior or how hurried they seem.
- 6Once verified, cooperate fully and without resentment. The point is to put checking before trust, not to withhold trust.
What to say
- “I am happy to help once I have confirmed this with your office. What is the main switchboard number? I will look it up myself as well.”
- “Could you wait outside for a moment while I call the company?”
- “I am sure you are who you say you are, and I check everybody.”
When to use it
- •Someone at the door, on the phone, or by email claims to represent the police, a court, a regulator, a utility, a bank, or your own IT department.
- •A person with apparent seniority or credentials asks you to skip a normal procedure "just this once".
- •An expert, real or claimed, offers confident advice outside the field in which they are qualified.
- •A request arrives with official trappings and a deadline but without any way to confirm it that the sender did not supply.
Counters
Evidence and how strong it is
That people defer to the trappings of authority is one of the better-supported findings in social psychology, though the classic studies need their caveats. Milgram (1963, 1974) found high rates of compliance with an experimenter's instructions; the work has been criticized on ethical and methodological grounds (Perry 2013), but a partial replication with modern safeguards found comparable compliance up to the point tested (Burger 2009). Bickman (1974) showed in field experiments that passers-by complied far more often with arbitrary requests from a man in a guard's uniform than from the same man in ordinary clothes. Hofling et al. (1966) reported that most nurses in a field study prepared to give an excessive dose on the telephoned order of an unknown "doctor", although Rank and Jacobson (1977) did not replicate this when nurses were familiar with the drug and free to consult colleagues, which is itself an argument for verification and consultation. Cialdini (2007) synthesizes this literature and makes the distinction used here between being an authority and merely displaying its symbols. Evidence for the countermeasure is indirect: it follows from the mechanism and is standard practitioner doctrine in security (Mitnick & Simon 2002), but it has not been tested as an intervention in randomized trials.
- In a genuine emergency (a fire marshal ordering an evacuation, a paramedic, a traffic stop by a marked police vehicle) comply first and verify afterwards. The rule is for requests involving money, access, information, or entry to your home, where a few minutes of delay costs nothing.
- During an in-person encounter with someone who may really be a law-enforcement officer, verify calmly and without physical resistance: ask for identification, say that you are going to call the station to confirm, and keep your hands visible. Local law on what you must comply with varies.
- Verification tells you that a person holds a role. It does not tell you that their request is lawful, within their remit, or in your interest, and it does not settle whether an expert is right.
- Overapplied, this becomes blanket distrust of expertise, which is its own vulnerability. The target is unverified claims to authority, not authority.
- Milgram, S. (1974). Obedience to Authority: An Experimental View. Harper & RowThe original obedience experiments showing high compliance with instructions from an apparent authority.
- Burger, J. M. (2009). Replicating Milgram: Would people still obey today?. American Psychologist, 64(1), 1-11A partial replication under modern ethical constraints finding compliance rates comparable to Milgram's up to the 150-volt point.
- Bickman, L. (1974). The social power of a uniform. Journal of Applied Social Psychology, 4(1), 47-61Field experiments showing that a uniform alone sharply increased compliance with arbitrary requests.
- Hofling, C. K., Brotzman, E., Dalrymple, S., Graves, N., & Pierce, C. M. (1966). An experimental study in nurse-physician relationships. Journal of Nervous and Mental Disease, 143(2), 171-180Field study in which most nurses prepared to follow a telephoned order from an unknown doctor; cited together with the later failure to replicate under conditions allowing consultation.
- Cialdini, R. B. (2007). Influence: The Psychology of Persuasion (rev. ed.). Harper BusinessSynthesis of the authority literature and the distinction between genuine authority and its easily counterfeited symbols.
- Mitnick, K. D., & Simon, W. L. (2002). The Art of Deception: Controlling the Human Element of Security. WileyPractitioner case narratives of impersonated authority and the recommendation to verify identity and authorization through independent channels.