Phishing Awareness Training Course

Included in Plus Delivery: 100% online Duration: approximately 15 minutes plus simulator Certificate on Completion UK business focus

22,000+ learners across our course collection. Immediate access. Start learning now. Not happy? 14 day 100% money-back guarantee. Major credit and debit cards accepted.

Help your team spot phishing attempts before they become security incidents. This short online course gives employees practical habits for recognising and responding to suspicious emails.

Phishing remains one of the most common cyber risks facing organisations. The UK government's Cyber Security Breaches Survey 2025/2026 found that phishing was the most common type of cyber security breach or attack, identified by 38% of businesses and 25% of charities in the last 12 months.

The training is calm, practical, and manager-friendly. Learners practise how to pause, verify, report, and recover without panic or blame, using examples that fit everyday UK workplace situations.

Learning with us

Why learn phishing awareness?

Reduce risky clicks by helping staff recognise pressure tactics, suspicious links, fake login pages, and unusual payment requests.
Improve reporting so suspicious messages reach the right person before they spread.
Support safer accounts by reinforcing strong passwords, strong MFA, and approved login routes.
Give managers a clear, no-blame way to respond when someone reports or clicks a suspicious message.
Build practical habits that fit real work, including finance approvals, shared mailboxes, hybrid working, and supplier requests.

Course features

Short and Practical

Designed for busy teams, with realistic examples rather than technical theory.

UK Guidance

Aligned with practical advice from the NCSC on spotting, reporting, and defending against phishing.

Modern Scenarios

Explore suspicious emails, social engineering, safe responses and practical inbox scenarios.

Certificate

Learners receive a digital certificate when they complete the course and pass the assessment.

Course information

Learning outcomes

Recognise common phishing email patterns and social-engineering tactics
Check links, domains, sender details, attachments, and payment requests more carefully
Know when to use a separate channel to verify a request
Report suspicious messages using your organisation’s procedures
Understand what to do if a learner has clicked, replied, or entered information
Use MFA and approved account routes to reduce the impact of stolen credentials

Key topics covered

Recognition: fake urgency, spoofed senders, suspicious links, attachments, and login prompts
Focus: suspicious emails and practical inbox scenarios
Business impact: credential theft, invoice fraud, malware, data loss, and account takeover
Safer response: pause, verify, report, recover, and support colleagues
Manager habits: no-blame reporting, escalation routes, and learning from near misses

This course is recommended for

Employees who use email, messaging, payment systems, or online accounts at work
Managers who need staff to report suspicious messages quickly
Finance, HR, operations, customer service, and administration teams
SMEs and local authorities that need concise phishing awareness training
Teams refreshing cyber security or data protection training

Prerequisites

None. This course is written for non-technical learners and assumes no prior cyber security training.

Course content

Section 1: Welcome

Start with the course introduction and notices.

Lessons

Welcome and course notices

Section 2: Recognising phishing

Learn what phishing is, how to inspect a suspicious email, and how social engineering works.

Lessons

What phishing is
Anatomy of a phishing email
Social-engineering cases

Section 3: Responding safely

Learn what to do when in doubt, then practise with ten fictional emails in the inbox simulator.

Lessons

What to do when in doubt
Inbox triage simulator

How it works

Step 1

Buy course seats

Purchase online using your credit or debit card. You can start learning yourself or invite team members to complete the course.

Step 2

Start learning

Work through practical examples, short lessons, and a final assessment. Learners can complete the course online at their own pace.

Step 3

Use the learning

Use the certificate as evidence of awareness training and reinforce the reporting route inside your organisation.

What's included

Training

Distraction-free online learning platform
Four teaching lessons plus an inbox simulator
Practical examples for everyday work

Updates

Access to course material updates for the length of your access period

Certification

Certificate on completion
70% pass mark required

Course FAQs

Who is this phishing course for?

This course is designed for UK employees, managers, and small teams who use email, messaging, online accounts, payment workflows, or shared systems at work. It does not assume technical security knowledge.

How long does the course take?

Allow around 15 minutes for the teaching, plus time for the ten-email inbox simulator. The welcome and course notices are separate.

What does this course cover?

Four teaching lessons cover phishing, inspecting suspicious emails, social engineering and safe responses. An interactive inbox simulator lets learners practise with ten fictional emails.

Is this course UK-specific?

The course is written for UK organisations and discusses reporting suspicious messages through your organisation. The National Cyber Security Centre provides further phishing guidance.

Will learners get a certificate?

Yes, learners receive a digital certificate after completing the course and passing the final assessment.

Can I buy multiple seats for a team?

Yes. You can buy seats for multiple team members during checkout. Each learner receives their own access and can complete the training independently.

Is there a money back guarantee?

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course, contact us within 14 days of purchase for a full refund.