Phishing Email Quiz — Test Your Awareness
Can you spot the phishing emails? Review 8 emails and decide if each one is legitimate or a phishing attempt.
Dear Valued Customer, We detected unauthorized access to your account. Your account will be suspended within 24 hours unless you verify your identity immediately. Click here to verify your account: [Verify Now] If you do not take action, your account will be permanently locked. Amazon Security Team
Why Phishing Awareness Matters
Verizon's 2026 Data Breach Investigations Report found phishing started 16% of breaches outright, and stolen credentials, often collected by an earlier phishing email, started another 13%. AI tools now write convincing lures in seconds, so spelling mistakes are no longer a reliable tell. Short, regular practice helps your team catch what filters miss.
This quiz uses realistic examples based on common phishing tactics targeting businesses. Each email teaches you specific red flags to look for, from fake domains to urgency tactics to credential harvesting.
Common Phishing Red Flags
Suspicious Sender Domain
Look carefully at the sender's email address. Phishers use domains that look similar but are misspelled (amaz0n.com, microsft.com).
Urgency & Threats
"Your account will be suspended in 24 hours" — legitimate companies rarely threaten immediate consequences via email.
Generic Greetings
"Dear Customer" or "Dear User" instead of your actual name. Real companies know who you are.
Suspicious Links
Hover over links before clicking. If the URL doesn't match the company's real domain, don't click it.
Want Professional Phishing Training?
We set up email security and run security awareness training for businesses, so your team spots the next phishing email before anyone clicks.