ScamDrill
ScamDrill helps families and organizations teach people to recognize scams through simulated messages and lessons afterward. Family exercises use email and SMS, while organization training also includes QR code scams. Training adjusts to each learner's performance, increasing difficulty as their skills improve. A dashboard records progress, scam types caught, and areas where a learner may need more practice. Family members can send suspicious messages for AI analysis; message checking is included with the Family plan. Organizations can sync learner rosters with Okta, Azure AD, and Google Workspace, while Enterprise includes a REST API and webhooks. ScamDrill says its data is encrypted in transit and at rest, and that its simulated landing pages do not capture or store what learners type. The company also says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is listed as planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001, and HIPAA. Plans range from a free tier to paid family and organization options.
Who it is for
It suits families training teenagers or older adults, as well as organizations building scam awareness among employee teams. Organization plans add roster sync and, at Enterprise level, API and webhook access.
What is good
- Family drills cover both email and SMS.
- Organization simulations include QR code scams.
- Training adapts to each learner's performance.
- Dashboard tracks progress and scam types caught.
- Landing pages do not store learner-entered text.
What to know first
- Free plan includes one email drill per month.
- Free plan supports one learner at beginner difficulty.
- SOC 2 is listed as planned, not completed.
Verdict
ScamDrill pairs adaptive scam simulations with progress tracking for families and employee teams. Readers should note that SOC 2 is planned, while paid organization plans offer audit report exports.
ScamDrill plans and pricing
All plansCompared on cybersecurity training platforms
- Free plan
- Yes
- Phishing simulations
- Yes
- Awareness content
- Yes
- Automated campaigns
- Yes
- Risk scoring
- Yes
- SSO support
- Yes
- Training formats
- interactive
