SECURITY AWARENESS TEST
This was a simulated phishing email.
No harm done — this was a internal security-awareness exercise, not a real
message. The link you clicked was safe, and no information about you was collected
beyond the fact that the link was opened.
What tipped it off?
- An unexpected money / document request that pressed for quick action.
- A sender domain that wasn't one you actually work with — always check it letter by letter.
- A link to "confirm" or "review" something instead of going through a known channel.
What to do with a real one
- Don't click or reply. Verify any money/document request out-of-band — call the known contact.
- Report it using your normal "Report Phishing" process.
This exercise is run by our security team to help everyone spot real attacks.
Results are reviewed at the team level — this is about training, not blame.