Learn to Spot Online Scams
Build practical cybersecurity awareness by working through realistic emails, messages, websites and everyday online situations.
Choose a scenario
Select an everyday online scenario category to test your vigilance.
Featured Training Scenarios
Practical, bite-sized simulations designed to take 1–2 minutes each.
Microsoft Sign-in Alert
An alert from Microsoft says someone signed in to your account from Melbourne. It asks you to check if it was you.
Urgent Password Expiry Warning
A message claims your work password will expire in 2 hours and gives you a button to keep your current password.
CommBank Monthly Statement
Commonwealth Bank notifies you that your monthly eStatement is ready to view inside NetBank.
Urgent Payroll Direct Deposit Form
An email from your company HR says there is an issue with your bank details and asks you to update them before payday.
Australia Post Collection Notice
Australia Post sends a collection notice saying your package is waiting at the local Post Shop.
DHL Customs Duty Pending
An email claiming to be DHL says your parcel is held at customs until you pay an unpaid fee of $3.40.
How It Works
Active investigation rather than simple multiple-choice memorisation.
Step 1: Inspect
Look at sender addresses, links, and how the message is written within realistic examples.
Step 2: Decide
Make your call: does it look safe, or does something feel suspicious?
Step 3: Learn
Get friendly, simple explanations from a trainer on what gave it away or why it was safe.
Quick Safety Habits
Four fundamental rules to keep you and your organization protected.
Check the real sender address
Look past the display name to the full address after the @ symbol. Watch for misspellings like replacing "o" with "0".
Inspect links before clicking
Hover over hyperlinks or check the browser address bar to ensure the domain matches the official organization.
Beware of manufactured urgency
Scammers frequently demand action within 24 hours to create panic. Pause and verify through a trusted phone number.
Never share 2FA codes
One-time security SMS codes are for you alone. Legitimate companies and bank staff will never ask you to read them out.
Ready to test your skills?
Start with Scenario 1 and work your way through 30 real-world simulations.