Inbox pressure test
Five messages. Trust none by default.
Phishing works by borrowing urgency, authority, and routine. Review each message, make the call, and learn which signal deserves a second look.
Explore↓SECURITY DRILL
MESSAGE 01 / 05IT
IT Supportsupport@company-security.co
Action required: mailbox access expires today
We detected a login issue. Confirm your account now to avoid losing access before 5 PM.
company-security.co/verifyInspect the sender, request, destination, and context.
The rule
Urgency is not identity.
A familiar logo and an urgent deadline do not authenticate a request. Pause, inspect the actual sender and destination, and verify through a known channel when the action could expose credentials, data, or money.
The safest habit is not memorizing every trick. It is building a repeatable verification step before consequential action.