Phishing simulation
What is gotcha phishing?
The opposite of coaching-first: phishing programs built on embarrassment, failure leaderboards or punitive consequences.
In more detail
It produces impressive short-term click-rate drops and lasting cultural damage. People learn to avoid the simulation rather than to recognise the attack, and they learn not to admit mistakes.
Why it matters
It is the most common own goal in the category, and it is usually adopted with good intentions.
Related terms
An approach to phishing simulation that responds to a click with a private, educational moment rather than public embarrassment.
Security training built on psychology rather than fear — people are treated as partners, and clicks become coached learning moments instead of infractions.
Vocabulary is the easy part. Behavior is the job.
Thirty minutes, a live account, and a straight answer about where your people actually stand.