What's inside
Work through the sections in order — two games are hidden in the middle and at the end.
1
📧 The Dodgy Email (Phishing)
The #1 way attackers get in — and the easiest to stop once you know the signs.
2
💼 The Fake Boss Email
A scam that skips the tech and targets the human — costs UK businesses millions every year.
3
🔄 Reply-Chain Hijacking
The scam hiding inside a real conversation you were already having.
4
📎 The Booby-Trapped Attachment
One curious double-click and malware is on the company network.
5
💬 Fake Colleague on Teams
Teams feels internal and trusted. Scammers know that — and use it.
🎮
🔍 Spot the Scam — Game 1
12 messages. Some real, some fake. Can you tell which is which?
6
🔗 Dodgy Links in Teams
Teams chat links feel trusted. They shouldn't, automatically.
7
🎯 Spear Phishing (Targeted Attack)
The most convincing phishing doesn't come from a stranger.
8
📱 Dodgy QR Codes (Quishing)
Why scammers love QR codes — and why your phone is the weakest link.
9
🔑 Email Account Takeover
The damage doesn't stop when you change your password — it starts when they get in.
10
🔔 MFA Fatigue / Push Bombing
Already been through everything else? This is the scam that tries to wear you down.
🏆
⚡ Cyber Top Trumps — Game 2
Face 18 cyber attacks. Pick the defences that stop them. Watch the danger stats drop.
The two games
Unlock them as you progress through the sections.
Spot the Scam
12 real-looking messages — emails, Teams chats, and texts. Some genuine, some scams. See if you can tell them apart.
Unlocks after Section 5
Cyber Top Trumps
Red attack cards vs blue defence cards. Pick the right controls to reduce the threat level — and see your score in real time.
Unlocks after Section 10
Ready to defend the inbox?
Work through all 10 sections and both games at your own pace.
Everything is self-contained — no login, no downloads.
⏱ Estimated time: around 20 minutes
Start Now ▶