Phishing awareness training: The Eid Voucher

Phishing Awareness training in a 2:55 animated story. It covers Email phishing red flags and reporting; QR codes; AI-written phishing. In English and Arabic, with captions you can switch on or off, and a scenario quiz at the end.

Watch the full course →

What your team will learn

Identify the four red flags in a phishing email (a lookalike sender address, pressure to act fast, a link that doesn't match, and a request for your password), including when the link is a QR code or the email has no spelling mistakes.
Report a suspicious email with the Report button, without clicking its links, scanning its QR codes or replying to it.
State the two steps to take straight after clicking a phishing link or typing a password into it: report it immediately, then change your password.

The story

“The Eid Voucher” is the story at the heart of this course. Rob (sales coordinator) is the lead character; the learner watches the situation unfold, spots the warning signs, and sees the right thing to do. Set in Nakhlora Group, a fictional Gulf company.

Sample quiz question

Rob's email says the AED 500 Eid voucher "expires in 60 minutes". What should that countdown tell him?

The voucher is limited, so he should claim it first and check later.
Someone wants him to act before he has time to check.
It comes from an automated HR system, so it is routine.
Nothing much: most genuine offers have a short deadline.

Correct answer: Someone wants him to act before he has time to check.

Why: Countdowns are there to rush you past the checks. A real HR offer will still be there after you verify it.

Full transcript

Transcript of the English video. The Arabic transcript is on the Arabic page.

The Eid Voucher (Phishing Awareness) [0:01] Rob: An Eid bonus? Five hundred dirhams... and it expires in sixty minutes? [0:07] Narrator: Rob has a client call in five minutes and an inbox to clear before Eid. He clicks. [0:14] Narrator: A page that looks just like the Nakhlora sign-in asks for his password. He types it in. [0:21] Rob: That's it? It just sent me back to the home page. [0:31] Narrator: Now someone else has his password, and his Sent folder fills with that voucher, going to two hundred colleagues. [0:45] Rob: Layla, it's Rob. I clicked a bonus email and typed my password. I've hit Report. [0:51] Layla: Thanks for calling straight away. Change your password now. I'm on my way. [0:57] Narrator: Here's the email Rob saw. Four things give it away. Can you spot them? [1:08] Rob: But it says HR Rewards. [1:10] Layla: Anyone can type HR as a name. Check the address: nakhlora dash rewards. Ours is just nakhlora dot example. [1:21] Layla: That countdown is there to rush you. Real HR won't cancel your bonus in an hour. [1:28] Layla: Hover over the button, but don't click. [1:31] Rob: That link doesn't go to Nakhlora at all. [1:39] Layla: Then it asked for your password. A bonus never needs one. If a link opens a sign-in page, go to the portal yourself. [1:50] Narrator: A QR code in an email is the same trick, moved to your phone. And don't count on spelling mistakes: criminals use AI to write perfect emails. [2:02] Narrator: When an email feels off, don't click, scan or reply. Press the Report button. It goes straight to the security team. [2:12] Narrator: Already clicked, or typed your password? Report it immediately, then change your password. Minutes matter. [2:22] Layla: You reported in four minutes. We pulled that email from every inbox before anyone else clicked. [2:37] Rob: Not this time. Reported. [2:42] Narrator: One habit: before you click, check who really sent it. Anything feels off? Press Report, or contact your security team.

Key facts

Length (English)	2:55
Length (Arabic)	3:37
Languages	English · العربية
Captions	WebVTT
Quiz bank	14
Questions shown	10
Pass mark	80
Lead character	Rob — sales coordinator
LMS id	2055