Private phishing practice

Real or Phish? Phishing Resilience Test

Test how you interpret identity, context, pressure, requested actions, and uncertainty—not how many security terms you know.

Tool guidance

How to use this tool

Answers and confidence stay in this browser tab. No demographics are requested or scored, and no scenario answer is sent to analytics.

Choose the six-scenario challenge or full 18-scenario assessment.

Classify each message and state your confidence.

Read the evidence and safe action immediately.

Review private learning metrics and recommendations.

Accuracy is separate from confidence.

False negatives and false positives are reported separately.

Optional habits can tailor advice but never change the main score.

Practice independently opening official apps and directories.

Use the message analyzer for a real suspicious message.

Use First Aid if you clicked or shared information.

Nothing is sent to a server. Progress is held only in this tab and is deleted when you reset or leave the page.

Research-informed, not a guarantee

Manipulation cues are evidence, not proof. One urgent, authoritative, emotional, or personalized phrase cannot establish phishing.

Technically experienced users can still be deceived. Self-reported knowledge is not treated as proof of resilience.

Age, gender, nationality, education, profession, and other demographic attributes are not collected or used in results.

No score here is claimed to be scientifically validated. Independently verify sensitive requests through an official channel.