wombat logo

Phil: An Anti-Phishing Training Game

Anti-Phishing Phil

Make anti-phishing education as easy and fun as playing a game! In about 10 minutes your employees or customers can learn the basics of how to spot phishing attacks. Deploy the basic version of Phil on your intranet or license a version customized to meet the needs of your organization.

phil got hooked

Anti-Phishing Phil™ is an engaging online game that teaches people how to identify phishing URLs. We developed Phil after observing that standard anti-phishing training materials are not very effective.   Scientific evaluation has shown that Phil is more engaging than traditional training solutions and significantly more effective in terms of how well people are later able to detect phishing attacks and how long they remember what they have learned.

spot the scam

Phil is used by enterprises for both employee training and customer education. We can customize Phil with your organization's URLs and branding or integrate the game into a larger training program. We can help you use game play data to assess your organization's ability to resist phishing attacks and prioritize your training efforts.

Click here to play Anti-Phishing Phil on our web site.

Watch a demo at YouTube.

Scientific Publications

Anti-Phishing Phil: The Design and Evaluation of a Game That Teaches People Not to Fall for Phish

S. Sheng, B. Magnien, P. Kumaraguru, A. Acquisti, L. Cranor, J. Hong, and E. Nunge. In Proceedings of the 2007 Symposium On Usable Privacy and Security, Pittsburgh, PA, July 18-20, 2007.