Threat library

The types of email scams people see every day.

This library uses fictional examples and plain language so people can recognise the tactics without being overwhelmed by jargon.

Password reset phishing

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Microsoft 365 impersonation

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Bank fraud

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

HMRC and tax refund scams

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Delivery scams

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Invoice redirection fraud

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Chief executive impersonation

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Gift card scams

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

QR-code phishing

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Malicious attachments

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Remote support scams

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Charity impersonation

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Romance and emotional manipulation

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Account verification scams

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net

Subscription renewal scams

Common warning signs include requests for urgent action, mismatched sender details, suspicious links, unusual payment or password demands, and emotional pressure designed to stop the recipient from checking independently.

Example domains for education only: example.com, example.org, example.net