Help the people you care about spot scams before they strike

Yes, always. Your loved one opts in with their own consent and knows training simulations will arrive—they just won't know exactly when or what they'll look like. This mirrors real scams: you know they exist, but never know when one will show up.

They see a friendly ScamDrill page explaining the scam, which red flags were present, and how to spot similar attempts. There's never any risk of malware, data theft, or actual harm—the tone is always warm and encouraging.

Anyone. Simulations are tailored by age group—IRS fraud, tech support cons, and grandchild emergencies for older adults; fake social media warnings, crypto scams, and phishing job offers for teens and Gen-Z. Difficulty and educational content adapt to each learner.

Our library covers the most common types: fake IRS notices, tech support alerts, package delivery scams, bank security warnings, grandchild emergencies, and charity fraud—plus social media account warnings, crypto giveaway scams, fraudulent job offers, and phishing DMs. New templates are added regularly based on real-world trends.

Every drill is built from real, recently reported scams — sourced from the FTC Consumer Sentinel, the FBI Internet Crime Complaint Center (IC3), the AARP Fraud Watch Network, and real-time community reports on r/Scams. Our team reviews fresh fraud trends every week and updates the simulation library, so what your family practices reflects what’s actually landing in inboxes and texts right now. Learn more about how we build simulations →

Typically every 15 to 30 days on a semi-random schedule, so learners can't predict when one will come. You can adjust the frequency from your dashboard.

Absolutely. Every simulation email includes an unsubscribe link. Learners can opt out with a single click at any time.

An admin creates an organization, invites team members by email or bulk CSV, and manages everything from a centralized dashboard. Members receive simulations just like individual learners, but the admin sees aggregate analytics, department breakdowns, and training progress across the entire team.

Realistic enough that click rates on first-month simulations typically match what attackers see in the wild — that's the point. Templates cover the highest-volume real-world pretexts (shipping notifications, document-share requests, Microsoft 365 admin alerts, voicemail notifications, invoice fraud, IT helpdesk tickets, payroll updates, CEO wire-transfer requests). Each simulation pairs a brand-correct visual layout with a sender domain that matches the pretext, and the educational debrief shown after a click teaches the specific red flags that template exercised.

Yes. You can organize members into departments and run targeted training campaigns that send specific simulation templates on a schedule. For example, you could run BEC (business email compromise) simulations for Finance and credential harvesting campaigns for Engineering.

Forward any suspicious email to check@scamdrill.com and receive an instant analysis. Our AI engine checks the sender, content patterns, and links to identify phishing attempts—returning a risk score, red flags, and recommended actions within seconds. Included with Business and Enterprise organization plans, included with the Family+ plan, and available to Free and Family users as a $2.99/mo add-on.

Yes — a one-time setup so simulated phishing lands in inboxes the way real phishing would, instead of getting flagged by your gateway. Our guided Email Delivery wizard walks your IT admin through a few clicks in Microsoft 365, Google Workspace, or your provider of choice. No DNS changes required to get started.

Enterprise and Max plans include a REST API plus real-time webhooks (sent, opened, clicked, reported) for any LMS, SIEM, or security tool. The same plans bundle SAML SSO and SCIM directory sync via WorkOS — works with Okta, Entra ID, Google Workspace, OneLogin, JumpCloud, and any SAML 2.0 IdP. Deprovisioning a user in your IdP automatically deactivates them in ScamDrill.

Enterprise plans include white-label branding options. You can customize primary and secondary colors, sender names, and email footers. Full white-label mode removes ScamDrill branding entirely so simulations appear as internal training.

Every org plan — Team, Business, Enterprise, and Max — includes audit reports with learner-level detail: simulation delivery records, click rates, report rates, risk scores, and annual WBT compliance training completion. Reports can be exported as CSV for SOC 2, ISO 27001, HIPAA, or other compliance frameworks. You can generate reports for custom date ranges.