Urgency bypasses rational thinking and triggers emotional responses. When people feel pressured by a fake security alert or urgent message, they're more likely to click without evaluating whether the request is legitimate, making them vulnerable to credential theft and data compromise.