Carter Zupancich

Before joining Doppel, he designed and executed vishing, smishing, phishing, deepfake, and physical security assessments for organizations across the public and private sectors. He has personally conducted more than 8,500 human-to-human vishing calls and delivered hundreds of thousands of simulated phishing text messages and millions of simulated phishing emails.

His work focuses on how adversaries exploit trust and organizational workflows, using realistic social engineering simulations to identify gaps in verification, reporting, and security procedures. He also examines how AI can automate and adapt social engineering across channels, testing what makes a pretext credible, where verification breaks down under pressure, and how people respond to suspicious requests. He translates those findings into scenarios and evaluations that help Doppel’s platform assess human risk through observable behavior and process failures.

Badges: Speaker, BSides Chicago 2025; Layer 8 Podcast Ep. 141.