Good news: this was a test

The email you clicked was a phishing exercise run by Trusterity, with Ivan's approval. Your account is fine and nothing will be locked.

You only opened a page. Nothing was saved or sent, and no one asked for your password.

What gave it away

• A deadline with a threat. Accounts that aren't confirmed will be locked on Tuesday morning!!! Pressure like this is built to make you hurry and skip checking.
• The link went to a look-alike address. It pointed to social-links.net, not the sociallinks.io you know. An extra dash and a different ending are classic tricks to make a fake address look official. Real account changes happen on the page where you always sign in, never through a link in an email.
• The request didn't fit the sender. A CEO doesn't personally ask everyone to confirm their sign-in. Account security notices come from IT.
• It came from a real colleague's mailbox. Mailboxes get hacked, including leaders'. A familiar sender is not proof the message is safe.

What T-Frame shows

This is the warning T-Frame shows on this email.

Notice the "Trusted" label. The sender was marked as trusted, and T-Frame still flagged the message. It reads what the email asks you to do, not only who sent it. That's exactly what protects you when a real colleague's mailbox is hacked.

T-Frame checks emails in Gmail and Outlook and warns you before you click. It's the product we're building together.

Next time

• Never confirm an account from an email link. Open the site yourself instead.
• Check any deadline with the sender. Ask in Slack or by phone, not by replying to the email.
• Use T-Frame's buttons. If it warns you, press "Report to Security team" and answer "Yes" to "Is this a scam?" so T-Frame keeps learning.

Ivan will share what we learned from this test with the whole team. No names.