Phishing Practice Inbox
Safe-practice email inbox with 20 messages mixed real + fake. Can you spot the scams?
Practice, no risk
Easy = obvious tells. Medium = tricky. Hard = AI-polished modern phishing.
How scammers are getting better
The old tells — bad grammar, misspellings, weird greetings — are fading fast. AI now writes flawless English. Deepfake voices can imitate a grandchild in a callback. Logos and layouts look pixel-perfect. Here is what still works against the new breed:
If an email claims to be your bank, Apple, or family — close the message and call or message them using a number you already have, not one from the email.
Visible link text can say anything. The real destination is what matters. On a phone, press and hold the link to preview.
Countdown clocks, "final notice," "account will be locked" — these are pressure tactics. Real companies give you time.
No real company asks for your password, Social Security number, or full card in response to an email.
Share a fake you got
Got a scam in your inbox? Paste it below. If it is a new twist we have not covered, we may add it to the practice set.