03 9070 9810 Start free trial

Free phishing training. No sign-up required.

Start learning without creating an account or providing an email address. Free for any person or organisation, with Australian examples and practical activities to help you recognise, check and report suspicious requests.

Start free training Explore business simulations

A practical introduction you can share

Start learning yourself or give your team a common foundation.

No sign-up required

Open the course and start learning without creating an account or supplying an email address. Your details are only requested if you choose an optional completion certificate.

Five focused lessons

Work through explanations, examples and activities that build a repeatable checking habit.

Australian examples

Choose Australia in the course's region selector for relevant institutions and resources.

Practice as you learn

Complete four activities in each lesson's assessment, with opportunities to retry.

A clear completion goal

Finish all five lessons and pass their assessments to complete the course.

Optional certificate

After completion, you can request an emailed certificate through the course's verification process.

See inside the free course

Real screenshots from the lessons and activities. Explore the course without creating an account or providing an email address.

Actual OutPhish course overview with a diagram of phishing channels, requested actions and safe responses.

Know what to expect

The course starts with a plain-language introduction and a visual guide to how phishing reaches you, what it asks for and how to respond. No previous cybersecurity knowledge is needed.

View full-size screenshot
Actual OutPhish lesson showing how security tools, workplace context and reporting work together.

Learn with visual explanations

This lesson explains how security tools, your knowledge of normal workplace processes and prompt reporting work together. Diagrams sit alongside the explanations so you can follow each idea.

View full-size screenshot
Actual OutPhish knowledge-check activity asking learners to match example messages to four pressure tactics.

Practise spotting pressure tactics

In this activity, match example messages to urgency, authority, fear or secrecy. Each lesson includes practical checks, with opportunities to retry as you learn.

View full-size screenshot

What you will learn

1. How phishing works

Understand how a message uses a believable story, pressure and a requested action. Learn why a professional appearance or a familiar name is not enough to establish trust.

2. Spot the warning signs

Examine who is contacting you, what they want and whether the request fits. Practise a routine of stopping, thinking, verifying and reporting.

3. Real-world scenarios

Apply your judgement to situations involving invoices, shared files, QR codes, account prompts and voice requests.

4. Report and respond

Learn how to raise a concern and what to explain if you have already interacted with a suspicious request. Follow your organisation's response process where one applies.

5. Keep the habit

Bring the checks together and practise using them consistently when the next unexpected message arrives.

Try a scenario: an invoice with new bank details

The situation: A message appears in an ongoing supplier conversation. It says the supplier's bank account has changed and asks you to use the new details for today's payment.

Pause: The familiar conversation does not prove the new instruction is genuine. Notice the change to the usual payment process and any pressure to act quickly.

Verify: Use a trusted contact number or your established supplier-verification process. Do not rely on a new phone number included in the message you are checking.

Report: If the request is suspicious, follow your workplace reporting process. If a payment has already been made, alert the appropriate internal contact and your bank promptly.

This illustrative example shows the kind of decision the course helps you practise. You will work through additional scenarios and activities in the training.

For further guidance, see the Australian Signals Directorate's ACSC advice on preventing business email compromise and responding if money or account details are at risk.

Start learning how to recognise and check phishing

No sign-up required. Open the free course, choose your region and start learning.

Start free training

For individual learners and organisations

Learning for yourself

You can take the public course without a business account. Use the glossary when a term is unfamiliar and retry an activity when you need more practice.

Sharing with a team

Share the public course link with colleagues, volunteers or other learners. Explain your own reporting route alongside the course so people know how to get help in your organisation.

Using a personal training link

If your organisation has emailed you a personal link, use that link for your training. The public URL is not linked to an employee record and does not automatically record completion against one.

Requesting an optional certificate

Complete the lessons and pass the assessments, then use the certificate request form if you need a completion record. It asks for your details, an organisation and a nominated supervisor. After email verification, certificate copies are sent to you and that supervisor.

The form explains certificate administration and offers marketing as a separate optional choice. You can take the course without requesting a certificate.

Build on the course with ongoing team practice

The free course provides an introduction to recognising, checking and reporting suspicious requests. An organisation may also want to practise those skills through messages sent to its employees and review how the team responds.

Explore OutPhish Australia's automated phishing simulations and employee security training for recurring practice, feedback and management reporting. These business features are separate from the free public course.

Teams working with payments and sensitive documents can also explore training for law firms, accountants and bookkeepers and real estate agencies.

Questions about the free phishing-awareness course

Yes. It is free and available to any person or organisation. You do not need to purchase OutPhish or create a business account to access the public course.

No. You can take the public course without creating an account or providing an email address. Before starting, read and accept its terms. Your details are only requested if you choose to request an optional completion certificate after completing the course.

The five lessons cover how phishing works, warning signs, real-world scenarios, reporting and responding, and keeping the habit. Examples include suspicious email, messages, calls, QR codes and requests for payments or account information.

Yes. The course offers Australian examples and resources. It also has United Kingdom and United States region options. Check the Course region selector when you open it.

Complete all five lessons and pass all four activities in each lesson's assessment. The course shows your progress and lets you retry activities.

An optional certificate can be requested after completion. The request asks for your details, your organisation and a nominated supervisor. Verify your email through the link sent to you; certificate copies are then emailed to you and the nominated supervisor.

The public course link is not linked to an employee record. If your organisation sent you a personal training link, use that link so completion can be recorded for the correct employee. Public learners can request the optional certificate.

The certificate form explains how your details are used to administer the certificate and service. Marketing is a separate optional choice. Your supervisor's details are used for certificate administration, not marketing without their own consent.

The public course provides lessons and assessments. Organisational phishing simulations, recurring testing and management reporting are separate features of the OutPhish business platform.

Choose your next step

Take the free course yourself, share it with your team or explore the OutPhish business platform.

Start free training Start a business trial
Call Start free trial