Your route
Start with the first section and follow the route at your own pace.
Start · Sections 1–5
Spot the signs
Phishing, impersonation, reply-chain scams and risky attachments.
Then · Game 1
Play Spot the Scam
Use what you have learned on 12 messages and see the clues.
Continue · Sections 6–10
Protect your accounts
Teams links, targeted phishing, QR codes and MFA prompts.
Finish · Game 2
Play Cyber Top Trumps
Choose defences for eight randomly selected cyber threats.
See all 10 topics
1
📧 The Dodgy Email (Phishing)
The #1 way attackers get in — and the easiest to stop once you know the signs.
2
💼 The Fake Boss Email
A scam that skips the tech and targets the human — costs UK businesses millions every year.
3
🔄 Reply-Chain Hijacking
The scam hiding inside a real conversation you were already having.
4
📎 The Booby-Trapped Attachment
One curious double-click and malware is on the company network.
5
💬 Fake Colleague on Teams
Teams feels internal and trusted. Scammers know that — and use it.
🎮
🔍 Spot the Scam — Game 1
12 messages. Some real, some fake. Can you tell which is which?
6
🔗 Dodgy Links in Teams
Teams chat links feel trusted. They shouldn't, automatically.
7
🎯 Spear Phishing (Targeted Attack)
The most convincing phishing doesn't come from a stranger.
8
📱 Dodgy QR Codes (Quishing)
Why scammers love QR codes — and why your phone is the weakest link.
9
🔑 Email Account Takeover
The damage doesn't stop when you change your password — it starts when they get in.
10
🔔 MFA Fatigue / Push Bombing
Already been through everything else? This is the scam that tries to wear you down.
🏆
⚡ Cyber Top Trumps — Game 2
Face 8 randomly selected threats from a pool of 18. Pick the defences that reduce How Bad.