Halloween · once a year

Phantom Phishing

Checking the calendar…

Enjoying Phantom Phishing?

Ideas or bugs? →

Game guidePhantom Phishing: full rules, strategy tips and FAQ

▶ Halloween · Security

Phantom Phishing

It's the Hollowmere Halloween party, and messages keep landing: your bank, your boss, your best friend, a parcel service. Investigate each one with a few checks (the full sender address, where the link really goes, where replies go, what it asks), then unmask the phantom or trust the message. Some are genuine, even the urgent ones.

4 chapters
Security

How to play

Read the message. The inbox only shows a name, and anyone can type any name.
Investigate. Run 3 checks per message, then 2: full sender address, real link target, reply-to address, what it asks.
Unmask or trust. Unmask a phantom and name the clue that proves it, or trust a genuine message.
Score. 100 for the right call, +50 for proof. A wrong call costs one of 3 lives.

Quick tips

Names are free. Anyone can type "Your Bank" as a display name. Open the full address.
Read the domain right to left. The real domain sits just before the first single slash: online.emberbank.com is the bank, emberbank.com.pay-now.net is not.

3 more tips in the Phantom Phishing guide →