Overview

ScamDrill helps households and employee teams practise spotting scams through simulated messages and follow-up lessons. Its adaptive exercises and progress dashboard suit families and organizations that want training to respond to learner performance. The free tier is tightly capped, while the richer family and organization plans add useful features at sharply different price points.

Key features

Family simulations cover email and SMS; organization exercises also include QR-code scams. Exercises adjust to each learner’s performance and grow more difficult as skills improve, which makes the approach better suited to mixed-experience groups than a fixed sequence. The dashboard tracks progress, scams caught, and areas needing practice, helping a family or team identify where more work may be useful.

Family members can forward suspicious emails or texts for AI analysis. That checking is included in Family and can be added to Free; it gives households a way to assess questionable messages outside the drills. Organizations can sync rosters with Okta, Azure AD, and Google Workspace, while Enterprise adds a REST API and webhooks. ScamDrill also supports phishing simulations, interactive awareness content, automated campaigns, and risk scoring, though those capabilities are not all assigned to specific plans.

ScamDrill says it encrypts data in transit and at rest, isolates tenants at the database level, and supports passkey-based two-factor authentication. It says it does not sell personal data or share learner data with advertisers or data brokers. Simulated landing pages do not capture, transmit, or store what learners type. SOC 2 is planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001, and HIPAA. Those exports may help with audit preparation, but they do not change the stated status of SOC 2.

Pricing

ScamDrill is freemium, with a free plan and paid plans from $9/mo. The Free plan costs 0.00 USD per free and allows one learner, one email drill per month, beginner difficulty, a progress dashboard, and real-time alerts. That is enough for a limited introduction, but the one-learner and one-drill caps make it a poor fit for regular household or team training. AI Analysis costs 2.99 USD per month as an add-on to Free.

Family costs 5.25 USD per year, billed annually at $63, and renews at the standard $84/yr. It covers four learners, email and SMS drills, the full scam library, iPhone and Android apps, AI message checking, and priority support. It is the relevant paid choice for a household wanting ongoing practice and message analysis, but its four-learner cap may not cover a larger family. The Family plan includes a free trial.

Organization plans are priced annually and step up with seat count and capabilities:

Starter: 336.75 USD per year for 2–25 seats, with email simulations, Autopilot, adaptive training, compliance reports, and helpdesk support. It renews at the standard rate after year one ($449 shown). Its ceiling suits a small team, but it does not include SMS or QR-code coverage in the listed plan features.
Team: 1124.25 USD per year for up to 100 seats, with the Starter feature set and additional seats in blocks of 100. It renews at the standard rate after year one ($1,499 shown). The block-based additions suit growing teams less precisely than per-seat expansion.
Business: 4499.25 USD per year for up to 500 seats, with everything in Team plus AI scam detection, campaign scheduling, and departments. It renews at the standard rate after year one ($5,999 shown). SSO/SCIM is an add-on at $2,500/yr, an important extra cost for organizations that require it.
Enterprise: 14999.25 USD per year for up to 2,500 seats, with everything in Business plus white-label branding, an LMS API, and priority support. It renews at the standard rate after year one ($19,999 shown); SSO/SCIM is an add-on at $2,500/yr. This is the tier for larger deployments that need those additions, but its annual cost is a substantial commitment.

Starter and Team list helpdesk support; Enterprise lists priority support. The organization plans include a free trial.

Platforms

ScamDrill is available on Android, iOS, web, and API. The Family plan specifically includes iPhone and Android apps; roster synchronization and Enterprise API features give organization buyers additional integration options.

Who it's for

ScamDrill is aimed at families training teenagers and older adults, and organizations building scam awareness across employee teams. Family is the clearer fit for household practice and suspicious-message checking. Small teams can start with Starter, while larger organizations can weigh the higher seat limits and added features of Team, Business, or Enterprise. It is less compelling for a single person seeking frequent drills or an organization that needs SSO/SCIM without the added annual charge.

Pros and cons

Pro: Adaptive exercises and a progress dashboard connect practice to each learner’s performance and show where skills need work.
Pro: Family combines email and SMS practice with AI checks of suspicious messages, covering both training and everyday questions.
Pro: Organization roster sync supports Okta, Azure AD, and Google Workspace, reducing the gap between team rosters and training enrollment.
Pro: The stated landing-page behavior avoids capturing text entered during simulations, a useful safeguard for learners.
Con: Free is limited to one learner and one email drill monthly, so it offers little room for sustained household practice.
Con: Organization plans involve substantial annual costs, and SSO/SCIM adds $2,500/yr to Business and Enterprise.
Con: SOC 2 is planned rather than achieved, a distinction procurement teams should account for.

Alternatives

For a broader shortlist, see Cybersecurity training platforms. Consider Wizer if a free basic security-awareness plan with limited reporting and learner reminders is enough. Choose Brightside AI if its free courses or per-seat voice-focused and hybrid attack simulations better match the training need. PhishSkill is worth comparing for email and WhatsApp simulations, with its free offer limited to 30 days before per-user monthly pricing applies.

CyberHoot is another freemium option. Breach Secure Now is a paid alternative. CAPS by Cypherdote offers paid monthly plans with simulation and assessment credits. Keepnet Labs is a paid option with web, API, and self-hosted platforms. PhishingBox is a paid alternative with campaign, phishing, and training simulators.

Verdict

ScamDrill is a strong fit for families that want guided email and SMS practice plus AI message checks, and for employee teams that value adaptive exercises and progress tracking. Choose it for the combination of simulations and follow-up learning; look elsewhere if a tightly capped free tier is all you need, if organization pricing is too high, or if completed SOC 2 status is a requirement.

	Hook Security	ScamDrill
Free plan	No	Yes
Free trial	No	Yes
Paid from	—	$2.50/mo
Open source	No	No
Platforms	Web	Android, api, iOS, Web

Hook Security vs ScamDrill

Hook Security

ScamDrill