A rewards lure is a social-engineering tactic that uses points, credits, bonuses, expiring offers, or other benefits to push a person into clicking a link or taking quick action. The message is designed to feel routine and helpful, but it adds urgency, such as “redeem now” or “your points will expire,” so the target acts before verifying the request.
In cyber security, rewards lures are common in phishing and smishing because they exploit trust in loyalty programs and account notifications. The link often leads to a lookalike page built to collect passwords, personal details, or payment data. Defenders look for brand impersonation, deadline pressure, and suspicious domains, while users should verify offers through the official app or website instead of tapping the message link.