Glossary

What is Phishing Simulation?

Phishing Simulation: A phishing simulation is a planned security exercise in which employees receive harmless messages that mimic fraud attempts. The purpose is to practice detecting, assessing, and reporting suspicious communications. Feedback and follow-up are part of the exercise, ensuring that it serves as a basis for learning, not just a record of clicks.; Also known as: Phishing Simulation; Phishing simulation (English)

Drill, not a real attack

The simulation uses scenarios that resemble phishing, but is part of a planned training program. Feedback links the choices made to clues in the message and the organization’s reporting procedures. The results may indicate a need for more training. A click rate describes behavior during the exercise, not a complete picture of the organization’s security.

Example: Phishing simulations

Employees receive a simulated message about sharing a document. After the exercise, they review which signs might have raised suspicion. The team discusses how the message could have been verified and reported. The example is used further in the training, without being an actual fraud attempt.

👉 Explore Phishing Simulations with XtraMile