Recognising Phishing & Social Engineering

Spot fraudulent emails, links and calls with confidence and respond correctly. Online training as a story course & micro series, certificate included.

Full story course ~20 minutesMicro series ~20 minutes~3 modulesCertificateTest-out

Start free trial See pricing

Course preview

Watch module 1 for free: right in your browser, no sign-up.

More than 90 percent of successful cyberattacks start with a deceptively genuine email, call or message. Technology alone stops no attack — what matters is how your people react in everyday situations.

The course shows how to spot phishing emails — spoofed senders, manipulated links, artificial urgency — and how social-engineering tactics like authority and curiosity are exploited. Instead of clicking, learners practise reporting suspicious messages and can tell spear phishing and whaling from mass phishing. The content follows recognised guidance (BSI — Social Engineering & Phishing) and is tailored to typical everyday situations.

The topic ships in two formats: a full story course (approx. 20 minutes) with voiced video dialogues, decisions and a final test — or a micro series (approx. 20 minutes in total) released in short units over several weeks. Learners receive a personal certificate after passing the test; every completion is documented audit-proof. Available in up to 10 languages with native voice-over.

What your team will learn

Typische Merkmale von Phishing-Mails (Absender, Links, Dringlichkeit, Anhänge) erkennen
Social-Engineering-Taktiken wie Autorität, Zeitdruck und Neugier durchschauen
Verdächtige Nachrichten korrekt melden statt zu klicken
Spear-Phishing und Whaling von Massen-Phishing unterscheiden

Formats & duration

Full story course

~20 minutes · ~3 modules

A cinematic full course with voiced video dialogues, decisions and a final test: ideal for the annual mandatory training.

Micro series

~20 minutes

The same topic as short units released over time: continuous awareness without blocking an afternoon.

Source & legal basis

BSI — Social Engineering & Phishing Open official source ↗

The course is coupled to the official source and updated when it changes.

Topics covered in this course

phishing trainingspot phishing emailssocial engineering awarenessphishing awareness coursesecurity awareness trainingIT security courseemployee awarenesse-learning with certificate

Frequently asked questions

How long does the "Recognising Phishing & Social Engineering" training take?

The full story course takes about 20 minutes and ends with a test and certificate. As a micro series your team covers the same content in short units spread over several weeks — about 20 minutes in total.

Who is this training for?

For all employees — no prior knowledge needed. The content follows recognised guidance (BSI — Social Engineering & Phishing) and uses realistic everyday situations instead of dry theory.

Is there a certificate and proof for audits?

Yes. After passing the final test, learners receive a personal certificate. Every completion is documented audit-proof — ideal for audits, certifications and evidence duties.