Free · no account · no tracking

Practice makes safe.

Scam messages and calls often seem convincingly real today. Here you can practise spotting the trap in peace — in a simulated inbox, on a simulated phone, with fake pop-ups and shops — and prepare for the day something slips through. Nothing can go wrong.

Start with the pop-ups See the whole course

Try it right now

This email has just arrived. Point at the link with your mouse without clicking, and just read the address — on a phone, use the “Show link target” button. Then decide: genuine or a trap?

On to the full inbox with eleven emails

Exercise

From: ParcelGull Customer Service <service@parcelgull-delivery.test>

Your parcel is waiting: £1.99 customs fee outstanding

We were unable to deliver your parcel PG-4471-0925 because a customs fee of £1.99 is outstanding.

Please pay within 24 hours, otherwise the parcel will be returned to the sender:

This link goes to: https://parcelgull.test.customs-fee.test/pay What matters: customs-fee.test

Answer: A trap. The link belongs to a completely different address, and the email pushes you to pay quickly. Real parcel services do sometimes send payment links for customs fees — still, only pay in the app or on the website you open yourself.

Rule of thumb: read addresses from the right — what counts is the part right before the ending (.com, .co.uk …).

Your course through the pond

Two paths, each station about ten minutes. Start wherever you like — your progress is kept only in this browser.

Path 1

Spotting traps

Pop-ups, texts, calls, addresses, emails and online shops: work through the tricks calmly.

Path 2

Being prepared

What protects you if something does slip through: passwords, a second key, family agreements, devices — and an emergency drill.

Carp tip: The more a message rushes you, the more it pays to check calmly.

How does a computer actually work?

To many people it seems like magic. It isn’t: “No magic” shows step by step how it works — hands-on and without a test. Along the way, some traps lose their power to scare: a sender is only text, and a virus warning in the browser is only painted on the screen.

Go to “No magic”

Current warnings

You don’t need to follow every warning: scams change, the levers behind them don’t — and those are what you practise here.

These sites regularly report the scams going round right now — with real company names and examples:

  • Which? scam news — the consumer organisation’s latest scam warnings
  • Report Fraud news — warnings from the police’s fraud reporting service for England, Wales and Northern Ireland

Links checked 3 October 2026.

Why practising works

Spelling mistakes hardly give scam messages (“phishing”) away any more, but their levers, such as time pressure or fear, still do — and those who practise spot them better than those who only read warnings.

What the exercises are based on

Carp learn it too

Anglers call it “hook-shy”: a carp that has once been caught bites more cautiously. In 2020, researchers showed that carp also learn this caution just by watching, though it doesn’t last as long. So you don’t have to get hooked to learn — and refreshing helps. (Lovén Wallerius et al., 2020)

Already clicked?

It happens to careful people too — scammers are professionals. What matters now is acting quickly and in the right order.

I clicked — what now?

Practise together

The exercises work well side by side: with parents or grandparents at the kitchen table, or on a projector in a class. A special class mode shows everything larger and keeps no progress on the device.

In class and with family

All companies, people, addresses and numbers in the exercises are invented. Any resemblance to real companies or people would be purely coincidental and unintended.

An unhandled error has occurred. Reload 🗙

Rejoining the server…

Rejoin failed… trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.