⌖
select a message
to begin inspection
to begin inspection
I designed a playable concept that lets visitors practice spotting phishing messages.
I explored security awareness through a playable interface. Visitors identify suspicious messages and receive scores and feedback. This is a personal design concept, not a deployed training program.
I explored how practice and clear feedback can explain a security decision.
I explored a different format for security awareness: let people practice a decision and see feedback.
A slideshow can explain phishing warning signs. This concept lets visitors try spotting them in sample messages.
This module will teach you to identify common phishing techniques used by malicious actors.
Learning Objectives:
• Identify suspicious sender addresses
• Recognize urgency-based social engineering
• Report suspected phishing to IT
A live inbox. Clickable threat indicators. Real-time scoring. Visual feedback that matches the stakes: scan-lines, threat pulse, intrusion alerts. The user is treated as the operator.
5 messages flagged for inspection.
2 confirmed phishing · 1 social engineering attempt · 2 benign.
Tap suspicious indicators. Pulse pattern reveals threat severity.
[ ENTER QUEUE ]Five inbound messages. Two are phishing. Tap the suspicious words, links, or addresses to flag them. Then either REPORT the message or TRUST it. A summary appears at the end of the round.
Five messages cleared. Threats reported and legit mail trusted, as expected.
The visual language of intrusion — scan-lines, monospace, threat-pulse, HUD readouts — is usually associated with attackers. Putting it on the defender's side makes the surface feel capable rather than passive.
Threat indicators aren't shown in a bullet list. They're embedded in the email itself, hover-revealed and hit-flagged. The user clicks the suspicious sender, the suspicious link, and the urgency keywords. Inspecting the message is how the user learns.
A score, a streak, and a round summary that names you "Engaged Defender" or "Compromised." Behavior change comes from reward signals, not deadline emails. The HUD scores correctness in the moment, instead of in a quiz at the end.