🎣 Preview · Phishing simulation: the fake delivery notice
0 of 8 warning signs
🎣 Phishing simulation

Would you see through this e-mail?

Below is an e-mail of the kind that lands in inboxes every day. It contains eight typical warning signs. Look for them yourself first by clicking on anything suspicious – or let us walk you through every indicator step by step.

Preview
A look behind the scenes: This simulation is a first taste of the Sentrivo phishing simulator we are currently building. It runs entirely in your browser – nothing is stored, nothing is sent. The e-mail, the sender and "ExpressLog" are fictitious. Questions or ideas? Write to us.
Inbox – Mail
↩ Reply↪ Forward🗑 Delete📁 Move⚑ Flag
⚠️ FINAL NOTICE: Your parcel will be returned in 24 hours2
EL
ExpressLog Delivery Service
<customer-service@expresslog-delivery-portal.info>1
To: m.harper@example-ltd.com
Today, 06:47
⚠ External sender

Dear Customer,3

we attempted to deliver your shipment #EL-4471-92038, but the delivery address was incomplete. Your parcel is currently being held at our distribution centre.

Please note: if you do not confirm your address within 24 hours, the parcel will be returned to the sender and a return fee of €34.90 will be charged.4

For redelivery, a handling fee of €1.99 is due. Please have your credit card ready.6

Confirm delivery now →5

For security reason your shipment has been temporarly suspended. We apologise for the inconvinience and thank you for your understandig.7

You will find the proof of delivery attached:

ZIPProof_of_Delivery_EL-4471.pdf.zip
212 KB8

Kind regards
Your ExpressLog Customer Service Team

ExpressLog International · This message was generated automatically. Please do not reply to this e-mail.
Unsubscribe · Privacy
🔍 Find them yourself
0 / 8

warning signs found

Click on anything in the e-mail that looks suspicious: sender, subject, greeting, links, attachment, wording. Hover over links to see where they really lead.
    🏁 Done

    Eight warning signs – one rule

    None of these signs is proof on its own. But two of them in one e-mail already mean: don't click, don't open, don't reply – check and report instead.

    🛡️ What to do when you receive an e-mail like this

    1. Don't click, don't open. No links, no attachments, no data entry – not even "just to have a look".
    2. Check for yourself. Are you really expecting a parcel? Then open the carrier's website in your browser yourself and enter the tracking number there.
    3. Report it. Forward the e-mail to your IT department or security officer – or use the report button in your mail client. Reporting is never wrong.
    4. If you did click: report it immediately, change your password, have the card blocked. The sooner, the smaller the damage – nobody is punished for being honest.
    🚧 In development

    Where the phishing simulator is heading

    What you have just tried is the first building block. The finished simulator will be part of the Sentrivo platform – no extra effort for company admins, no finger-pointing at employees.

    📬 Multiple scenariosParcel delivery, request from the boss, Microsoft sign-in, job application, invoice – with a growing library.
    🎓 As a training moduleWith XP, badges and evidence in the training report, like every other Sentrivo module.
    📊 Insights for adminsWhich warning signs are recognised and which are missed – anonymised, no blame.
    Try Sentrivo for free → 🤝 Become a partner