This study was focused on social engineering using open Wi-Fi access points on students studying at university Vest. The study contains of two attack types, aimed to gather credentials from unaware students. The result shows that even students studying cyber security had difficulty identifying the different attacks.