Play now
Night Shift at Veltrix
A late shift in a logistics office. A vendor asks to change their bank details, a push keeps buzzing, and a caller says he is the CEO. Handle a full evening of pressure.
The core program for every employee. Each exercise drops a person into a realistic workday and asks them to make the call under a little pressure, then shows what happened either way. No slides, no quiz that everyone forgets by Friday.
A late shift in a logistics office. A vendor asks to change their bank details, a push keeps buzzing, and a caller says he is the CEO. Handle a full evening of pressure.
A display name says one thing, the real address another. Learn where to look before you trust a message, and how a lookalike domain is built.
A supplier emails new payment details before an invoice run. Verify the request through a channel the sender does not control before a payment leaves.
A short, urgent message from a manager asks you to buy gift cards quietly. Spot the business email compromise pattern and shut it down.
A friendly phone call warns you an email is coming, so you trust it when it lands. See how a two-step lure lowers your guard, and where it slips.
Your public posts are the attacker’s script. Watch a message built from details only a colleague should know, and learn what gives it away.
A receipt for something you never bought, and a number to call to cancel. The link is the phone number. Practise not dialling it.
A poster or an email asks you to scan a code, and the code skips every email filter you have. Learn to treat a QR code like any other link.
Someone from support needs a code to fix your account. Codes are never read aloud. Practise hanging up, calling back on a known number, and reporting.
A text says a delivery is stuck and a small fee will release it. SMS has no spam filter in front of it. Learn to read the link, not the panic.
A new number messages you as the CEO, urgent and off the usual channel. Practise moving it back to a channel you both trust before you act.
A finance approval comes from a face and a voice you know, live on a call. Learn the tells and the call-back rule that beats a convincing fake.
A shared drive is encrypting file by file. Know the early signs, disconnect the right way, and raise it before it spreads across the team.
A routine-looking invoice arrives with a document that wants you to enable content. See what one click sets off, and how to handle it safely.
A full-screen warning says your machine is infected and to call the number now. The warning is the attack. Practise closing it and reporting.
Approvals keep arriving on your phone at 11pm. Understand push fatigue, why you never approve one you did not start, and how to report it.
An attacker does not need your password if they can reset it. Lock down recovery email, phone and questions before someone else uses them.
A breach at one site becomes a break-in at yours when a password is reused. See credential stuffing work, then set up a manager and passkeys.
A branded memory stick is left by the door. Decide what to do with a device of unknown origin, and why curiosity is the whole attack.
A courier with full hands asks you to hold the door. Practise the polite, firm habit that keeps a stranger out of the building.
You step away for two minutes and leave the screen open. See how much an insider or a visitor can do in that window, and build the lock habit.
Open wifi, a shoulder near your screen, and a login page that looks a little off. Handle sensitive work outside the office safely.
The padlock means the connection is private, not that the site is honest. Learn what the address bar really tells you before you type a password.
The fastest control you have is a report. Practise the one action that turns a near miss into an early warning for the whole team.