Free tool · 10 examples · about 5 minutes
Phishing examples quiz: can you spot the UAE scams?
Ten messages of the kind that land in UAE inboxes and phones. Decide which are phishing and which are fine, see why after each one, and get a score to share with your team.
Illustrative examples. Every message here was written by Missan for training. They are not real emails, and the sender names, numbers and domains are invented. Do not visit the web addresses shown.
Why these ten
Common scam types, in one quiz.
The examples cover common routes to payment fraud and account takeover in small and mid-sized offices: impersonating a government body or a courier, copying the Microsoft 365 sign-in page, changing a supplier's bank details, impersonating the boss on WhatsApp, flooding MFA prompts and fake QR codes. Two are legitimate, because real messages arrive too and staff need to tell the difference.
Training is one layer. The others are MFA on every account, email authentication on your domain and a call-back rule for payment changes. Read phishing awareness training for UAE businesses and email security and payment fraud, or take the cyber-readiness score.
Ask about phishing training for your team
Your quiz score is attached if you finished it. Tell us how many staff you have and whether you use Microsoft 365. We reply within one business day.
FAQ
About the phishing quiz.
Are these real phishing emails?
No. They are illustrative examples written by Missan, based on scam types that are publicly reported in the UAE: fake tax refunds, courier fees, Microsoft 365 sign-in pages, invoice bank-change requests, CEO gift-card requests, MFA prompts, toll fines and QR-code parking notices. Sender names and domains are invented.
Is my score or anything I click sent to Missan?
No. The quiz runs in your browser. Only an anonymous completion event and score go to our website analytics. Nothing personal is sent unless you fill in the optional form.
What should staff do when they are not sure?
Do not click, reply or call a number in the message. Report it to IT using your normal reporting button or mailbox, and check the request through a channel you already trust, such as a phone number you have saved or the official app.
Is a quiz enough as phishing training?
It is a start. Training works best with regular short sessions, simulated phishing tests and technical controls such as MFA, email authentication (SPF, DKIM and DMARC) and link scanning. Our phishing awareness guide covers a full programme.
Can we use this quiz in our own staff training?
Yes. Share the link with your team, or ask us to run a session built around the examples your staff are most likely to see.
Find out where your IT stands.
The free IT health check (AED 1,800 value) is a one-session review of your support, security, Microsoft 365 and backups. You get a written list of what to fix first.