Phishing, fake sign-in pages, fake IT support, CEO fraud and changed bank details — the attacks that reach staff first. Ten questions with answers explained, ready for a team session.
Attackers increasingly make the employee do the risky step on a genuine page or channel: typing a code into Microsoft’s real sign-in page, starting a remote-access session for “IT”, or paying an invoice after a call with a “CEO”. Business email compromise alone caused about $3.05 billion in reported losses in 2025, according to the FBI Internet Crime Complaint Center (IC3).
Run it at the start of a session, discuss the explanations, and repeat a month later — each attempt draws a new set of questions. For hands-on practice, follow it with the phishing test.
Step-by-step guides to the scams in this collection: In Painted Sky, a free game, you live one life and meet these scams as they happen — then replay it with a lens that shows what was fake.
No — it complements one. Simulations test behaviour; this quiz explains the patterns so people know why a message is suspicious.
About three minutes for ten questions.
Yes. It is free, needs no accounts and works in any browser.
No. Scores stay in each person’s browser.