About

Phishing is everywhere, and it has been increasingly almost exponentially. Why? Because it works!

What is phishing?

Phishing is a type of attack in which an attacker will usually – but not necessarily – send an email trying to coerce people to do something they would otherwise not do, such as sending sensitive information (think passwords, bank account info, credit card numbers, personal/medical information, and so on) or installing malicious software such as viruses or ransomware.

Phishing can target individuals or entire companies: many of the largest data breaches started with a phishing email.

What is a phish?

  • Phish is the target, or victim, of a phishing campaign.

  • It is the “mermaid guy” logo of this website.

  • It may be you!

Don’t be a phish!

If you receive an email, call, or message that sounds a bit odd or was not expected,

  1. Slow down
  2. Don’t click on any links or download any attachments.
  3. Does the email make sense?
  4. Did you expect an email like that?
  5. Do you have a way to verify the source? Who send this to you? By verifying I mean contacting who the email claims to come from using their official contact info, not what is in the email.

We hope our little phishing website will entertain you, and just maybe help you learn how to identify when an email is phishy so you will not be phished.

We need your help!

Every single email we posted (and make fun of) here is a 100% certified phishing email. Problem is, we only receive so many of them; it seems phishers do not like us. We would love to post more, but we can’t phillet phishers without phishing emails. This is where you can help!

Did you receive a phishing email, or want to know if a suspicious email is indeed phishy? Don’t let them spoil your day! Let us turn it into some entertainment!

Send us your Phishing Email so we can phillet it for you!

Why should I care if I am phished (the reason behind this site)

I could post the usual statistics – how many companies are victims and yearly costs – but I will not. I know people who were affected by phishing emails.

  • Small organization I know got a call from someone claiming to be one of their employees. Whoever was the phisher here took the time to identify a real employee who was out of state at the time and then called the organization’s HR officer. The fake employee – the phisher – asked to change the bank used for her salary payments direct deposit. She managed to provide enough info to convince hr officer, including the right direct deposit form of new bank. The only reason this did not succeed was the bank this organization uses contact them saying this was suspicious.

  • Someone I know fell for the phishing attack that claims to be a company hiring him. Said company send a check to buy “equipment to setup the work-from-home environment” including laptop (\(\)) from a company they selected. And they said he could keep the rest of the money to help with other setup tasks. That was a lie: what he paid for the “order” was the money they fleeced from him. His bank told him that was a scam, the check they gave him bounced. And now he owed thousands of dollars to the bank, who gave him a week to come up with the money or they would close his account.

If you want to know about our company, you can click somewhere in this site to find out. But, for now forget about that. This is about doing what we can to cut down on predators who have the tools and (sometimes) the knowledge to scam people and their loved ones. We could peddle some “AI-based phishing detection app” but chose to stick to our belief that helping the person understand the process and detect the trap is more effective. Yes, we believe in the people, you, me, and even that guy browsing late at night in his underwear.

So, thank you for finding this site. We hope we in turn helped you avoid the bait.

Notes

Exciting Note

We will remove your identifying information before posting it, stating it was contributed by a “viewer like you (thank you!).” If you want to be acknowledged for the submission, do let us know how you would like to be called. If you have an avatar or picture you want use to use when referring to you, do attach it to your email!

Boring Note

Phish Phillet™ and the mermaid guy logo are trademarks of PrivacyTest Driver, LLC.