Free phishing quiz
Phishing quiz — can you spot the scam?
Five quick scenarios. See how sharp your phishing instincts are and get instant tips — no signup needed.
An email from “IT Helpdesk <it-support@yourcompany-secure.com>” says your password expires in 1 hour and links to a login page. What's the biggest red flag?
How it works
Answer 5 scenarios
Real-world phishing situations across email, SMS and QR codes.
Learn as you go
Get an instant explanation after each question.
See your score
Find out how you did and where to improve.
Why test your phishing skills?
Phishing is the starting point for the majority of breaches, and attacks now span email, SMS (smishing), voice (vishing) and QR codes (quishing). Knowing the red flags — urgency, lookalike domains, credential requests — is the fastest way to avoid being the entry point.
A quiz is a great gut-check, but real resilience comes from continuous practice. HookPhish runs realistic, personalized phishing simulations and trains people in the moment they slip, turning awareness into a lasting habit.
Related solutions & tools
Frequently asked questions
Is the phishing quiz free?+
Yes. The HookPhish phishing quiz is completely free, takes about two minutes, and requires no signup.
Can I run this for my whole team?+
The quiz is for individuals, but HookPhish phishing simulations let you test and train your entire organization with personalized campaigns and reporting. Book a demo to see it.
What's the difference between this quiz and the awareness test?+
The quiz uses real-world scenarios to test spotting skills; the phishing awareness test checks your knowledge of phishing concepts. Try both.
Security training designed for people. Built for enterprise.
Learn how HookPhish can effortlessly transform your security program and reduce your human cyber-risk.
Fill out the form to schedule a 30-minute chat with a product expert. We'll discuss the challenges you want to solve, walk through HookPhish, and answer any questions.
Book a personalized demo
Looking to become a partner? Use this form instead.