Spam Filter

Grimsby & Hale Freight cut its spam filter in the "budget realignment." Until procurement approves a new one, you are the spam filter.

Every email gets one of two stamps: DELIVERED or QUARANTINED. Stamp the real ones through and the phish into the void. Find the exact red flag first, whether it's a capital I pretending to be an l or a .pdf.htm attachment, and it counts as a Clean Catch.

Get it wrong and the damage counter climbs. Accounts Payable wires $48,500 for catering. Dave opens PAYMENT_SCREENSHOT.jpg.exe. Thirty-one coworkers reply to "IT" with their passwords, and the attacker thanks each of them. Politely.

Meet Darren

Darren works at a scam call center and is one click short of quota. He watches every call you make, and he messages you about it.

Catch his best work and he says "bro how." Let one through and he says "MOM IT WORKED." On Friday, he emails you himself and asks you to let one through, just once. What you do decides how the week ends.

Five days, one new rule a day

• Monday: read the sender, letter by letter.
• Tuesday: hover the links. The words of a link can lie.
• Wednesday: inspect attachments. Only the last extension counts.
• Thursday: open the headers. SPF and DKIM have to pass, even when it's your own boss.
• Friday: follow the money. No approved Finance ticket, no wire.

More ways to play

• Daily Shift: everyone gets the same 12 emails each day. Post your grid, your damage and your worst confession.
• Rush Hour: endless. Every email has a fuse that gets shorter. If it runs out, Dave opens the email himself.
• Challenge a friend: you get a 5-letter code. Anyone who enters it plays your exact inbox.
• Put your office in it: type in your real boss, the coworker who clicks everything, and whoever pays the invoices. Then screenshot your boss asking you for gift cards.

Made by someone who reads these for a living

I work help desk at an MSP. Every lookalike domain, every "are you available?" text and every password-protected zip from "insurance" in this game is a pattern from the real job, with the names changed.

Controls

Click anything suspicious to mark it as the red flag. D to deliver, Q to quarantine, H to view headers. Works on phones too.

No flashing lights. A breach pulses the screen edges red once.