Framework

The SIFT Method

The internet no longer just has a misinformation problem. It has a reality problem.

AI can now generate fake voices, fake videos, fake screenshots, and even fake people convincing enough to fool ordinary users — and sometimes entire organisations. That's why the SIFT method matters.

Developed by Mike Caulfield, SIFT is a simple framework designed to help people slow down, verify information, and avoid manipulation online.

What does SIFT stand for?

S

Step 1

Stop

Don't react emotionally or immediately. Scammers and manipulators rely on urgency, fear, anger, and panic.

  • Pause before you click, share, pay, or respond
  • Urgency is a manipulation technique
  • A moment of hesitation can prevent serious harm
I

Step 2

Investigate the source

Who is actually behind the information? Check the source, not just the post.

  • Is it credible and legitimate?
  • Does it benefit from emotional reactions?
  • A professional-looking account does not guarantee authenticity
F

Step 3

Find better coverage

Can trusted sources confirm the claim? Look for independent verification.

  • Independent reporting from multiple outlets
  • Official statements from relevant authorities
  • If only one account is reporting something dramatic, be cautious
T

Step 4

Trace claims to the original

Context matters. Videos, screenshots, and quotes can easily be edited or taken out of context.

  • Where did this originally come from?
  • Is this the full story?
  • Has anything been removed or manipulated?

The human firewall

Modern cyberattacks increasingly rely on manipulation rather than technical hacking. Deepfakes, AI-generated scams, fake news, and social engineering all depend on one thing:

People reacting before thinking.

SIFT helps break that cycle. It doesn't require technical knowledge — just the habit of pausing and asking the right questions before acting on information.

In a world full of synthetic media and digital deception, the ability to verify information may become one of the most important cybersecurity skills we have. Not just for security professionals — but for everyone.