Skip to content

PHISHING AWARENESS TRAINING FOR STAFFBetter instincts. Safer decisions.

Practical email-security training that helps your people recognise suspicious messages and know what to do next.

Quick check

The same trick, by text

A few days later this arrives on your work phone. What is it asking you to do?

  • Right. A text is no different from an email: if it wants you to pay or sign in, it gets checked through a route you already know.

  • Not this one. A reply confirms your number is live and hands over details for the next message.

  • Not this one. It asks you to open a link, enter your address and pay. That is three requests, not an update.

Example text message
EVRIToday 08:02

EVRI: We missed you. Your parcel will be returned today unless you confirm your address and pay a £0.99 fee: evri-parcel-redelivery.com

WHAT IT COSTS

£60 once, for one person, with no VAT to add

  • All 6 modules and 36 lessons
  • An assessment for each module, and a final assessment
  • A certificate with a reference an employer can check
  • Access for as long as your account exists, with new and updated lessons for twelve months

One payment with no VAT to add, no subscription. Access starts as soon as payment is confirmed. If the training is faulty or not as described, your rights to a repair or refund are not affected. Terms

Checkout is not enabled yet.

Or included with Business Pro, for everyone on the plan.

Six courses, one habit at the heart of each.

36 lessons of no more than 12 minutes each, built around doing rather than reading.

  • Everyday · 6 lessons · up to 12 minutes each

    Phishing fundamentals

    Start here. The one question that catches most scams, and how to check without being fooled.

    • Fake delivery notices
    • Fake account alerts
    • Prize and reward lures
    • Scam texts, chats and calls
    • Reporting what you see

    Lesson one is free

    Open Phishing fundamentals
  • Workplace · 6 lessons · up to 11 minutes each

    Protecting your work account

    The account is the real target. Learn what your provider does, and the tricks that beat a password and a code.

    • Fake Microsoft 365 sign-in pages
    • Device code phishing
    • Consent phishing
    • MFA fatigue prompts
    • A hijacked colleague mailbox

    Open Protecting your work account
  • Workplace · 6 lessons · up to 11 minutes each

    Invoice and payment fraud

    Changed bank details and fake invoices, and the one habit that stops them.

    • Invoice redirection
    • Lookalike supplier domains
    • Hijacked invoice threads
    • Payroll diversion
    • Director and gift card fraud
    • The first hour after a bad payment

    Open Invoice and payment fraud
  • Workplace · 6 lessons · up to 10 minutes each

    QR code phishing

    One scan moves the attack onto your phone, away from work protections. Take a route it cannot follow.

    • QR codes in PDF attachments
    • Stickers on car park machines
    • Fake sign-in pages on your phone
    • Fake Companies House identity checks
    • Fake parking fine notices

    Open QR code phishing
  • Workplace · 6 lessons · up to 11 minutes each

    Social engineering

    The story is the attack. Learn to hear it being told, on the phone, in a chat or in your inbox.

    • Fake IT support calls and Teams chats
    • Email bombing
    • Help desk impersonation
    • Approval numbers a caller reads out to you
    • Fake renewal charges with a number to call
    • Pretexts built from public information

    Open Social engineering
  • Workplace · 6 lessons · up to 10 minutes each

    Suspicious attachments

    The file name is a claim. Learn what actually opens, and how to check a file you were not expecting.

    • HTML and SVG attachments
    • Password protected archives
    • Shortcut and script files
    • Fake CAPTCHA and paste-a-command pages
    • Files from people you know

    Open Suspicious attachments

See it, decide, understand, practise.

Every lesson works like this: something to find, sort or decide, and the reason behind every answer.

  1. 01See a realistic situationAn email, a text or a call, the way it would reach you.
  2. 02Make a decisionFind the warning signs, sort what is safe, or choose what to do.
  3. 03Understand the cluesEvery answer explains why, the wrong ones included.
  4. 04Practise againA short check at the end of each lesson, and an assessment for each course.

Find the warning signs

A parcel that will not arrive

This lands in the office inbox on a busy morning. Five things here should make you stop, and one marked detail is perfectly ordinary. Pick out the five.

5 to find

All five, and you left the tracking number alone. The address and the link are the two that settle it.

  • The address it came fromRoyal Mail sends from its own domain. This one belongs to whoever registered rm-redelivery-support.info, and anyone can.
  • Dear CustomerA real delivery firm knows who the parcel is for. A message sent to thousands of people does not.
  • A small feeThe amount is kept tiny so nobody thinks twice. The real prize is the card number you type in to pay it.
  • The 48 hour deadlineA deadline is there to hurry you past checking. A genuine parcel can be looked up at any time.
  • The linkThe words say royalmail.com. The link really goes to redelivery-fee-uk.com, a different website altogether.
  • Not a warning sign: A tracking numberNormal. Every delivery notice carries one, and a reference nobody can look up still looks like a reference.
Example email
Inbox

Your parcel is on hold: redelivery fee due

Royal Mail <> To office@yourcompany.co.uk · Wednesday 11:20

We tried to deliver your parcel today The tracking number is , and a redelivery fee of . Please pay the fee to choose a new delivery date.

Royal Mail Customer Services

Progress is saved lesson by lesson, so you can stop after any lesson and come back. Try the whole free lesson

Help your whole team build confidence.

Business Pro includes every course for everyone you add, and the team page is where you decide who does what.

  • Assign a course to the people you choose, or to everyone at once.
  • See, for each person, whether each course you assigned is done or not yet.
  • The organisation threat report names the course that answers what has been reaching your people, and how many have completed it.
  • Each person earns their own completion certificate, with a reference an employer can check.

Completing a course is not the same as handling the next real email well, so the team page reports completion and nothing more.

Illustrative dashboard data. The people and figures are invented; the words are the team page's and the report's own.

Who can take it, and what they get.

See Business Pro
Which plans include training?

Business Pro and Enterprise, for everyone on the plan. Business, Personal and Free do not include it, though anybody can take the first lesson free.

Can individuals access it?

Yes. Somebody learning on their own can buy the whole catalogue once, for £60 a person, with no VAT to add. Checkout for it is not enabled yet.

What does an administrator see?

On the team page, which courses each person has been asked to do and whether each is done or not yet. The organisation threat report adds how many people have completed the course that answers what reached the team.

Are there assessments or completion certificates?

Each lesson ends with a short check, each course has an assessment, and a final assessment draws on every course. Passing earns a completion certificate with a reference an employer can check. It is a record of progress, not an accredited qualification.

How often is the content reviewed?

There is no fixed date. Lessons are revised as the scams they teach change, every completion records the version of the course it was earned on, and a purchase includes new and updated lessons for twelve months.

Does it work on mobile?

Yes. The lessons are ordinary web pages and work in the browser on a phone as well as on a computer.

Learn what to look for, understand why it matters, then practise what to do next.

What we do not claim

No course and no email checker can catch every scam. These lessons teach the habit that works when the tells run out: checking a request through a route the sender cannot reach. The completion record and certificate are personal records of progress, not accredited qualifications. A course purchase does not include email checks, and plans below Business Pro do not include training.

For teams, Business Pro gives every person their own access and their own records, and the admin can assign courses and see who has done them.

Start with one email. Leave with a better instinct.