Phishing simulation for insurance agencies

A phishing simulation for an insurance agency sends the team decoy emails that imitate typical requests from customers and insurance companies, and measures who opened, clicked or reported. With PhishingU you can run it yourself from ₪999 per one-time campaign (up to 100 employees), in Hebrew and with a summary report.

Last updated: 19.10.2026 | Written and reviewed by the PhishingU team

Get started now · from ₪999*A free initial check of the domain

* Setup in under 15 minutes, with no technical knowledge - one simple action is required from IT (allowlisting the sender), and launch is subject to a security review of up to one business day.

Why insurance agencies are a phishing target

An insurance agency holds customers' personal, financial and medical information, so it is a favorite target.
The work is conducted through many emails with customers and insurance companies, so a fake request gets through easily.
Documents and forms are usually sent as files or links, which is the common channel for phishing.

Three scenarios that suitinsurance agencies

A form or a document from a customer

An email that looks like a completed form or a document accompanying a policy, with a download link.

A message from the insurance company

A request that looks like an update of terms or a request to verify details.

A request to change payment details

A message that looks like a customer asking to update a payment method.

The scenarios are general types of requests for practice, with no impersonation of a real brand.

What is measured ininsurance agencies

Whether agents and secretaries open files and links that look like policy forms or documents from customers.
Whether requests to update customers' payment details are verified.
Whether some agents work remotely or from personal devices and should be treated separately.

How to prepare the team

Decide which teams will be included: agents, secretaries, the service team.
Prepare a short message to the team about the purpose of the exercise without specifying a date.
Add after the exercise a training on recognizing unexpected files and links from customers.

What you get at the end

A summary report with open, click and report rates, and a certificate of participation in awareness training. The certificate is evidence of training that helps meet part of the requirements of Amendment 13; it is not a confirmation of full compliance with a law or a standard. Payment is a one-time payment from ₪999 per campaign (up to 100 employees), with no subscription. See the The full price list.

Frequently asked questions

Why does an insurance agency need a phishing simulation?

Because it holds customers' personal information and receives many emails with files and links. A simulation shows which scenarios work and lets you train the team.

Is it suitable for a small agency?

Yes. From ₪999 per one-time campaign, up to 100 employees, with no subscription.

Is there a difference between an independent agent and an agency with employees?

The price is the same, and the difference is the size of the target audience. Even an agent with two employees receives a full report.