Impersonation is when the attacker plays the role of someone the victim is likely to trust, such as a delivery driver or repairman, to gain access to sensitive areas. The attacker may even attempt to impersonate someone over the phone to gather sensitive information.