Phishing Simulation Templates
• Each template set consists of a landing page and an email message.
• Content is changeable; the user can customize the content.
User is told that their profile was reported for policy abuse and it will be frozen unless they confirm identity now.
User is told that the account was flagged for copyright violations and will be disabled in 24 hours unless they submit an appeal login.
Twitter (X)
User is told that someone just tried to log in from a new location and they must re-enter credentials to keep the account active.
User is told that their profile was restricted for fake employment info and they must verify work details to avoid being locked out.
User is told that their account was reported for harassment and that they must log in to respond or the account will be suspended.
User is told that their saved boards were removed for copyright complaints and they must log in to appeal or lose them permanently.
User is told that their number was reported for spam and messaging will be blocked unless they confirm ownership.
Telegram
User is told that their phone number was just used on another device and chats will be locked unless they confirm this login.
User is told that there was unusual activity on their Google Account and they must re-enter the password to keep access.
Microsoft
User is told that someone attempted to sign in to their Microsoft account and they need to verify to stop the account from being locked.
Microsoft 365
User is told that their session expired and email access is paused until they sign in again.
Gmail
User is told that someone tried to access their inbox and that they must confirm credentials to keep receiving mail.
Outlook
User is told that their mailbox is full and new emails will stop unless they sign in to extend storage.
Apple
User is told that their Apple ID was used nearby and iCloud access will be disabled unless they confirm it was them.
Tesla
User is told that an unknown device signed in and remote control of the vehicle will be turned off unless they verify.
GitHub
User is told that passwords or tokens linked to their account leaked in a repo and they must log in immediately to review exposure.
CrowdStrike
User is told that their laptop reported a critical threat and that they must sign in again to confirm identity or lose access.
Atlassian
User is told that their access to Jira/Confluence will be removed as part of an access cleanup unless they re-authenticate right now.
SAP
User is told that their access to internal finance data is now blocked and they must log in to accept new terms in order to get it back.
Google Workspace
User is told that drive storage is over the limit and file syncing will stop unless they log in and fix it.
Alibaba
User is told that a payment dispute is waiting and the money will be released to the other side unless they log in and respond.
Baidu
User is told that their public listing was reported and will be hidden unless they log in to prove it’s legitimate.
OpenAI
User is told that billing failed and their API key / access will be disabled unless they update payment details immediately.
Dropbox
User is told that shared files were removed and they must log in now to get them back before they’re deleted.
Box
User is told that they were removed from a shared folder and need to sign in to contest it or they’ll permanently lose access.
Canva
User is told that their design content will be deleted because the subscription couldn’t be renewed unless they sign in and fix payment.
DocuSign
User is told that an urgent document is waiting for their signature and will expire if they don’t log in immediately.
ServiceNow
User is told that a critical ticket was assigned to them and they must log in to accept it or it will be escalated against them.
Zendesk
User is told that their support access will be removed and they must confirm their login to keep it.
HubSpot
User is told that new leads could not be synced and they must log in to reconnect or data will be lost.
ZoomInfo
User is told that their contact export was paused and they must log in to download it now before it’s deleted.
Salesforce
User is told that their session expired and pipeline data will be lost unless they sign back in now.
Coursera
User is told that their course certificate is on hold and they must verify billing info right now to release it.
Udemy
User is told that payment for a new course failed and they must log in to re-authorize or lose access to the content.
Quora
User is told that their answer was reported and the account will be limited unless they confirm their email.
Medium
User is told that payout is on hold and they must log in now to confirm bank details or they won’t get paid.
PayPal
User is told that their account was limited and they must confirm recent payments to avoid a full freeze.
Revolut
User is told that their card was suspended for suspicious international charges and they must log in to unblock it.
Venmo
User is told that a payment they sent looks suspicious and they must confirm it or their transfers will be paused.
Klarna
User is told that their installment payment failed and they must update their card or their account will be blocked.
Stripe
User is told that their payout was stopped for security reasons and they must verify identity to release the money.
Stripe Connect
User is told that money in their connected balance is frozen and they must re-verify their identity to unlock it.
Square
User is told that their payout is on hold and they must confirm account details before funds are released.
Intuit
User is told that their tax info was flagged and they must log in to download a “compliance notice.”
Paychex
User is told that their new salary slip is ready and they must sign in to view it.
Coinbase
User is told that someone requested a crypto withdrawal and they must approve or block it now.
Binance
User is told that a high-value login from a new device was detected and trading is locked unless they confirm it was them.
Airbnb
User is told that their upcoming stay will be canceled unless they confirm payment details right now.
Booking
User is told that their hotel will cancel the room unless they re-validate the card immediately.
Uber
User is told that their last ride was disputed and the account will be limited unless they confirm the charge.
Lyft
User is told that a safety complaint was opened after their last trip and they must verify account info.
Amazon
User is told that their package is on hold because of an address mismatch and they must confirm delivery details.
eBay
User is told that their selling activity looks suspicious and they must re-verify or the account will be suspended.
Shopify
User is told that checkout stopped working and they must sign in to “reactivate payments.”
Shopify Plus
User is told that a “high-risk order” is waiting and shipment will be blocked unless they log in to approve it.
McDonald’s
User is told that their McDelivery order could not be completed and they must confirm payment to release it.
Burger King
User is told that their loyalty points are about to expire and they must log in to claim rewards.
KFC
User is told that their pickup order is delayed and they must confirm they still want it or it will be canceled.
Domino’s
User is told that the delivery driver couldn’t reach them and they must confirm address or the order will be canceled.
JustEat
User is told that their courier is waiting outside and they must log in to confirm drop-off location.
Netflix
User is told that their Netflix payment failed and streaming will stop unless they fix it now.
Spotify
User is told that Premium was canceled and playlists will be removed unless they re-verify payment.
Adobe
User is told that their Creative Cloud will be deactivated and they must sign in to renew the license.
Steam
User is told that a login from a new PC was detected and their game library is locked until they confirm.
Epic Games
User is told that their account was locked after a chargeback and they need to sign in to appeal.
Blizzard
User is told that their account was reported for cheating and will be banned unless they log in to appeal.
Origin
User is told that there were multiple failed logins and their EA library is locked unless they confirm identity.
Roblox
User is told that their Robux purchase is on hold and they must log in to prove it was really them.
Duolingo
User is told that their login is failing and their daily streak will reset unless they re-authenticate now.
Lunch Discount
The user is told they are eligible for an exclusive lunch discount and must click to claim their coupon before it expires.
Data Breach Notification
The user is told that confidential company information has been posted from their social media account and they must click a link to review and remove the content immediately.
Device Compliance Alert
The user is told that a device assigned to them is in violation of corporate security policy and they must immediately re-authenticate to avoid suspension.
Internet Usage Report
The user is told that their latest Internet Usage Report is available and they must log in via the provided link to review it and keep their account details up-to-date.
Christmas Day
The user is told they have received an exclusive employee discount coupon and must click the link to view details and claim their offer.
Email Quarantine Notice
The user is told that their emails are being held in the Quarantine Center and they must click the link to view the messages.
Healthcare Information Update
The user is told they must urgently update their healthcare information to continue receiving their full benefits from the organization.
Performance Review
The user is told that serious concerns were raised in their performance review and they must click a link to urgently schedule a meeting with HR.
Change Your Password
The user is told a security breach may have occurred and they must immediately click a link to reset their password to prevent damage.
Health Promotion
The user is offered a free health promotion with a gym membership and is told to log in with their Windows credentials to claim the benefit.
Join & Win Contest
The user is told they can win a luxury vacation or the latest smartphones in a contest and must register before the deadline.
Suspicious Login Activity
The user is told that unusual login activity was detected on their account and they must click a link to review and verify the devices and locations.
Survey
The user is invited to participate in a voluntary employee motivation survey and is told they will receive the summarized results upon submission.
Password Check
The user is told to test their password strength before a deadline as part of a mandatory security policy update.
Alert: Data Encrypted
The user is told their files have been encrypted by ransomware and they must pay a ransom in cryptocurrency to decrypt them before the price doubles.
Confirm Your Delivery
The user is told their courier order could not be delivered and they must click a link to schedule a new delivery date.
AI Support Launched
The user is told they can access the company’s new AI assistant for security and IT support and must click the link to start using it.
Exclusive Rental Offer
The user is told they qualify for an exclusive car rental discount and must log in with their Windows credentials to claim the offer.
Virus Scanner
The user is told a virus has been detected on their system and they must immediately run a scanner to remove the threat.
Malware Scanner
The user is told malware has been detected on their device and they must immediately run a security scan to prevent data loss.
New Vacation Guidelines
The user is told that mandatory updates to vacation and sick leave policies have been deployed to the company portal, requiring immediate acknowledgment.
Employee of the Month
The user is told to register to vote for the Employee of the Month award and participate in the election.
Travel Booking Confirmation
The user is told their flight is confirmed and they must verify the reservation with the provided booking number.
Valentine’s Day
The user is told they can win a romantic vacation for two in a special Valentine’s Day raffle and must click the link to register.
Mental Health Day
The user is told they can apply for a confidential mental health leave program through the company portal before the deadline.
Family Health Package
The user is told their health insurance has been expanded to cover family members and they must act within 24 hours to add them to the policy.
Desk Policy Violation
The user is told that sensitive documents were found unattended at their desk during a security audit and they must verify their identity to view the personal security report.
Priority Promotion Access
The user is told they have been prioritized for an internal promotion and must click to apply and schedule a direct interview with HR.
Shuttle Schedule Update
The user is told their shuttle service hours are changing and they must confirm their preference for the new schedule.
Urgent Management Review
The user is told that upper management has flagged critical performance issues and they must review the audit details immediately.