Can you spot the phish?
Ten realistic emails and texts, some genuine and some phishing. Decide which is which, then see the red flags you caught and the ones you missed. Share it with your team.
- Free, no sign-up
- Takes a few minutes
- Nothing is stored unless you ask
Simple, start to finish.
Read each message
Look at the sender, the link, the tone and the request.
Phish or legit?
Make your call.
Learn the tells
Each answer explains the red flags so they stick.
Are these real emails?
They're modelled on common real attacks but use fictional companies and people.
Can I use this for staff training?
Yes, share the link. For ongoing training with simulated phishing, talk to us.
What's the biggest red flag?
Urgency plus an unusual request, especially to pay, change banking details or sign in through a link.
More free tools.
Want an expert to look at your results?
Tell us what you found. An Infinity engineer, not a salesperson, will reply within one business day.
Tell us about your IT.
We answer almost every inquiry within one business day.