Cyber awareness e-learning for employees
A short video and five questions after a phishing drill
PhishingU's learning module is part of the explainer page an employee sees after clicking a link in a phishing simulation: a short training video and a 5-question quiz with instant feedback after each answer. It is included in a self-serve phishing simulation campaign (from ILS 999 per campaign, up to 100 employees) and is not a full course.
Last updated: 25.10.2026 | Written and reviewed by the PhishingU team
Trying it here uses no personal link, so the result is not sent to any organization.
What an employee sees after clicking
The page says right away that it was a drill
The employee lands on an explainer page: this was a simulated email, and here is how it could have been spotted. Anyone can make a mistake, and this is a chance to learn.
A short training video
The video walks through three signs: the sender address, the link behind the button, and what to do: stop, do not click, report.
Five questions with instant feedback
After each answer the employee sees whether it was right and why. The whole run takes about two minutes, in Hebrew or English.
In the video: a fake email from an unfamiliar sender address with artificial urgency. The sender address and the link are suspicious. Three steps: stop, do not click, report.
What the quiz covers
Five questions about situations employees really meet:
- How to spot a suspicious sender address (a familiar name inside a different domain)
- What to do when someone posing as IT asks for a password and a verification code
- How to read the real destination of a link (the domain, the part between https:// and the next slash)
- What to do after clicking and entering a password (change it and report at once)
- What to do when you suspect an email but did not click (report it under your organization's procedure, do not delete before reporting)
What the module is and is not
This is a short module for immediate reinforcement after a drill. It is not a full course and not an annual training program. The score is simply the result of the employee's own quiz answers; it is not a certificate and not a supervised test, and it does not confirm compliance with any legal or standard training obligation.
Organizations that need full training can add instructor-led awareness training, in person or remote (Zoom/Teams/Google Meet) (ILS 1,500 in person, ILS 1,000 remote).
The campaign participation certificate is evidence of awareness training that helps meet part of the requirements of Amendment 13. It does not confirm full compliance with the law.
What the organization gets
The module is included in every self-serve phishing simulation campaign at no extra charge. The organization gets the campaign report (open, click and report rates) and a participation certificate, and employees get immediate reinforcement instead of a "you failed" page.
Each employee's quiz score is delivered to the organization and shown in the campaign details, so you can see who completed it and with what score. The employee sees a notice about this before starting.
Who it is for
For small and mid-sized businesses that run a phishing simulation and want the employee to learn something at the most attentive moment: right after the click. It can also serve as supporting evidence for a customer security questionnaire, together with the campaign report (see answering a security questionnaire).
Frequently asked questions
Want your employees to get this?
Every self-serve phishing simulation campaign includes the video and the quiz. One-time payment, no subscription.
* If you choose to run a campaign: setup takes under 15 minutes and needs no technical knowledge, but one simple action by your IT team is required (sender allowlisting), and launch is subject to a security-team review of up to one business day.