Phish or Legit?
Can you spot a phish? Test your instincts in 60 seconds. Real-looking emails fly in fast. Call each one before the clock runs out, and xBert will show you the red flag on anything you miss.
The red flags to watch for
- Lookalike domains: rnicrosoft, 0ffice, or your company name in front of someone else's domain.
- Urgency and threats: "within 2 hours," "account suspended," "final notice."
- Links that don't match: hover before you click and read where it really goes.
- Money and secrets: gift cards, wire transfers, changed bank details, MFA codes or passwords.
- Unexpected attachments: HTML "voicemails," zipped invoices, .exe "updates," and QR codes.
Every company and email in this game is made up. Want your team trained on the real thing? See our cybersecurity services or contact us.
