Abstract: A method for automatically determining a social engineering attack on a user account includes: receiving verification data for the user account; extracting diagnostic metadata from the received verification data; extracting a diagnostic feature from the diagnostic metadata, the extracted diagnostic feature corresponding to a feature of a trained machine-learning based model for determining the social engineering attack based on a learned association between the extracted diagnostic feature and a social engineering attack on the user account; and automatically determining the social engineering attack based on the extracted diagnostic feature, by using the trained machine-learning based model that was trained based on a first feature extracted from first training metadata regarding previously received verification data and a second feature extracted from second training metadata regarding a previous social engineering attack related to the received verification data, based on the learned association between th