IT
IT Service Desksecurity@northbank-support.com
SUBJECT
Urgent: Your account will be suspended
We detected unusual activity on your account. Verify your identity within 30 minutes to prevent permanent suspension.
↗northbank-secure-login.co/verify
Free phishing awareness game
YOUR INBOX.
THEIR BAIT.
Ten messages. One sharp eye. Spot the scams before DirtyPhish reels you in.
10MESSAGES
3LIVES
~3MINUTES
LIVE SIMULATION
SCORE 0STREAK ×0♥♥♥
MESSAGE 01 / 10
WHAT’S YOUR CALL?
← Legit or Phish →
HOW IT WORKS
Build the instinct.
Beat the bait.
Phishing succeeds when people act before they think. This simulation slows the moment down, then shows exactly what the attacker hoped you would overlook.
Read the message
Inspect the sender, subject, request and destination - not just the polished design.
Make your call
Choose legitimate or phishing. Trust evidence rather than panic, curiosity or authority.
Learn the tells
Get immediate feedback, practical verification advice and a score you can improve.
DIRTYPHISH FIELD GUIDE // 001
How to spot a phishing email
Phishing is a social-engineering attack that manipulates attention, emotion and trust. Modern phishing can be polished and well written, so spelling mistakes alone are not a reliable test.
Evaluate the complete situation. Was the message expected? Does the full sender address use the real domain? Is the request normal? Verify unusual requests through an official app, saved bookmark, known number or separate internal channel.
Inspect the real sender
Display names are easy to fake. Expand the address and look for swapped letters, extra words and unfamiliar domains.
Notice pressure
Urgency, fear, secrecy, authority and rewards are designed to make you act before checking.
Separate message from action
Open the official app or type a known address yourself instead of using the supplied link.
Treat files as untrusted
Unexpected HTML pages, macro documents, archives and executable files deserve immediate suspicion.
QUICK ANSWERS
Frequently hooked questions.
What is a phishing email?+
A message impersonating a trusted person or organisation to steal information or money, deliver malware or send the recipient to a fraudulent website.
Does every urgent email mean phishing?+
No. A warning sign is a reason to verify, not automatic proof. Combine sender, context, request and destination evidence.
What should I do with a suspicious message?+
Do not reply, open attachments or follow links. Report it and verify the request through a separate trusted channel.
