Clicked a suspicious email?
If you're not sure, report it the way your organization asks.
Reporting is always the right move, even if the email turns out to be a practice one.
Setup steps for practice emails are in member resources.
About practice emails
Could it have been a practice email?
It may have been. Many organizations arrange realistic practice emails so staff learn to spot phishing safely. They look like everyday messages: a shipping notice, a shared document, a password reset.
What happens after a click on a practice email?
You see a short training page about the clues you missed. We collect limited information about how staff engage with the training. It helps your organization understand how security awareness is trending across its staff over time.
Do these pages ask for my password?
No. Our training pages never ask for passwords or other credentials.
Who sees the results?
Your organization receives the results so it can plan training. Reports focus on click rates and trends over time.
Think it was real phishing?
Report it to your IT team right away. If you typed a password, change it and tell IT.
Why we don't list sending details here
If anyone could look up where practice emails come from, the practice would stop working. IT teams get the details through member resources.