Phishing Quiz: Can You Spot the Fake Email?

MAG212 CYBER · Tools · Stay safe

Phishing quiz: can you spot the fake?

Ten realistic emails and texts. For each one, decide: phish or legit? After every answer you’ll see the warning signs a professional would spot. Takes about 3 minutes. Questions are drawn from a pool of 30, so you get a new mix every time. All brands in this quiz are fictional.

Question 1 of 10Score: 0

Tip: tap or hover over a link to see where it really goes.

Your result
0/10

The 5 checks that catch most phishing

  1. Read the real domain. Look at the part just before the first single “/”, read from the right. northpeakbank.com.secure-login.net belongs to secure-login.net.
  2. Distrust urgency. “24 hours”, “account locked”, “final notice” are pressure tactics.
  3. Check the request, not just the sender. Gift cards, payment changes, passwords and codes are red flags even from a known name.
  4. Never enter a code you didn’t ask for. Device codes and MFA prompts you didn’t start are attacks.
  5. Verify another way. Type the website yourself, or call a number you already have.
Get weekly security tips (free)

Got a suspicious message right now?

Suspicious Link CheckerCheck a link for warning signs without opening it. Email Header AnalyzerSee where an email really came from. Password Strength & Breach CheckerClicked and typed your password? Check it. Incident Response ChecklistWhat to do in the first hour if you were hit.

This quiz runs entirely in your browser. Your answers are not sent or stored. All company names, people and addresses are fictional and used for training only.