Phishing. Smishing. Social engineering.

Spot the scam before it spreads.

Train your instincts. Investigate realistic email, SMS, and voice attacks with Inbox Detective—then make the call before the attacker gains momentum.

★★★★★Clear missions. Realistic clues. Immediate feedback.
The Inbox Detective holding a magnifying glass over a suspicious QR code Two cases ready

How It Works

1
Read the mission

Every game tells players exactly what they must investigate and how to begin.

2
Click suspicious details

Clues are visible, interactive, and collected in a persistent detective notebook.

3
Make the call

Choose the safest response and see why the decision stops—or advances—the attack.

What You'll Learn

Identify phishing and smishing attempts across email, SMS, and apps.

Recognize authority, urgency, fear, secrecy, and reward tactics.

Verify identity through trusted channels the attacker does not control.

Build habits that still work when people are busy or under pressure.

Choose your investigation

Start guided. Then test your instincts.

The primer teaches the interaction pattern first. The second game removes some of the guardrails and applies the same habits to a more demanding case.

Inbox Detective mascot investigating The Mimic FilesNext challenge
Game 2 · Advanced case

The Mimic Files

A persuasive executive request moves across email, text, and voice. The messages agree with one another—but consistency is not proof of identity.

EmailVoiceAuthorityUrgency
  • More subtle cross-channel clues
  • Greater emphasis on process bypass
  • Independent verification required
Play Game 2
Awareness is your best defense.

Inbox Detective turns safer decisions into repeatable habits.

Fun, gamified learning

Realistic, current tactics

Built for people and teams

Make smarter decisions

Inbox Detective mascot holding a magnifying glass
For teams and classrooms

Make human-risk training feel real.

Use Inbox Detective to start conversations about social engineering, verification, reporting, and the moment a persuasive request becomes dangerous.

Scenario-based learning
Email, SMS, and voice vectors
Immediate decision feedback
Repeatable discussion prompts
Enter the Training Range
Your first clue is waiting

Can you stop the mimic?

Slow down, investigate the signals, verify through a trusted path, and make the call before the attacker gets what they want.

Begin Game 1