🎣 Phishing Awareness Trainer

Spot the fake before it hooks you — free defensive training by Dinal Studios

🕵️ The Challenge

You will see 12 messages and links — some genuine, some phishing attacks written the way real criminals write them. For each one, decide: Legit or Phishing? Hover (or tap) a link to reveal where it really goes — the single most useful habit you can learn. All senders, brands and addresses below are fictional training examples.

Scenario 1 of 12 Score: 0

🎓 The 7 Red Flags of Phishing

1. Sender domain is "off". support@paypa1-secure.com is not PayPal. Read domains right-to-left: in paypal.com.evil.ru, the real domain is evil.ru.
2. Urgency & threats. "Account closed in 24 hours!" Panic is the attacker's tool — real companies rarely demand instant action by email.
3. Link ≠ destination. The visible text can say anything. Hover (desktop) or long-press (mobile) to see the true URL before clicking.
4. Unexpected attachments. Invoices, "shipping labels" and voicemail files you didn't expect are classic malware delivery.
5. Requests for secrets. No legitimate company asks for your password, PIN or full card number by email or message.
6. Too-good offers & payment tricks. Prizes you never entered for, and any request to pay by gift cards or crypto "to verify" — always a scam.
7. Something feels off — trust it, verify independently. Don't use the phone number or link in the suspicious message. Go to the official website or app yourself, or call the number on your bank card. That one habit defeats almost every phishing attack.

🛡️ This trainer is defensive awareness education. Every scenario is fictional; no real brands were impersonated and nothing here can be used to attack anyone.

More free tools by Dinal Studios