PHISHTANK

Your first week on the job. The inbox is waiting. So are the phishers.

Avatar color
  • Read every email — then hit R REPORT if it's phishing or S SAFE if it's legit.
  • Inspect I to hunt for tells: bad domains, sneaky links, fake urgency. +25 each.
  • Don't get hooked. Clicking a phishy link or attachment costs -300 and cracks your Security Rating.
  • Mind the yellow banner. "Originated from outside the organization" is a clue, not a verdict: real vendors trigger it, and spoofed insiders don't.
Loading inbox… Leaderboard →