Social engineering attacks can be carried out:. a. only through physical proximity, such as shoulder surfing.
b. remotely by highly sophisticated means and subject matter experts (SMEs).
c. only for fun, they don't give any useful information to the attacker, except may be by entering a building without an ID or something such.
d. via password cracking software, such as Rainbow trees.