Free Awareness Resource

Phishing Awareness Library

Real-world phishing patterns, rebuilt as safe examples. Read each message like it landed in your inbox, then reveal the red flags. Train your eye before it counts.

For security awareness training only. Every sender, brand, and link below is fabricated to illustrate common tricks. No link works, no data is collected, and no real organization is impersonated. Use these to educate your team — never to deceive.

The SLAM check

Four things to scan on every message before you click, reply, or open an attachment.

S

Sender

Read the actual address, not the display name. Watch for lookalike domains, misspellings, and "official" mail sent from free accounts like gmail.com.

L

Links

Hover before you click and read the real destination. Mismatched or lookalike domains and shortened URLs are warning signs. When unsure, type the address yourself.

A

Attachments

Be wary of unexpected files — especially .html, .zip, .iso, or documents that ask you to "enable macros" or "enable editing" to view content.

M

Message

Urgency, threats, secrecy, generic greetings, and requests for passwords, payments, or gift cards are classic pressure tactics — even when the name looks familiar.

The golden rule: when in doubt, don't click. Verify through a channel you already trust — call the person or company on a known number — and report the message to your IT or security team.