Think you can spot a Phishing Scam?

MY PROCESS FOR

Responsibilities: Instructional designer, graphic designer

Tools Used: PowerPoint, Adobe Illustrator

Audience: Office Workers

The Problem and Solution

The Problem

Due to the increasing prevalence of data breaches and the negative publicity surrounding cybersecurity failures, the client seeks to enhance cybersecurity awareness by strengthening employee engagement in phishing email detection. Analytics reveal that the current eLearning course lacks engagement, resulting in low retention rates and potential compliance risks. The existing program is a text-heavy recap of cybersecurity principles and does not incorporate interactive or practical elements to reinforce learning.

The Solution

I developed an interactive game-based simulation in Microsoft PowerPoint to address these challenges, offering the client an engaging and cost-effective training solution. The simulation uses clickable decision points, branching scenarios, and real-time feedback to challenge employees in identifying phishing attempts. Gamification elements enhance learner engagement, while a built-in completion confirmation screen enables HR/Compliance to track participation. This LMS-free, software-independent approach provides a scalable and effective solution, strengthening the client’s cybersecurity awareness without the need for additional eLearning tools.

The Challenge

The client needed an LMS-free, software-independent solution that provided an engaging, eLearning-style experience. Without access to eLearning authoring tools or an LMS, traditional interactive course development was not an option. The challenge was to design a dynamic, gamified simulation using Microsoft PowerPoint—ensuring it remained interactive, visually engaging, and assessment-driven. Additionally, the solution had to offer real-time feedback and trackable completion status to meet compliance requirements—all without relying on standard digital learning tools. The final design required a balance of interactivity, engagement, and scalability while remaining accessible to all employees.

Supporting Documents

Click on the images below to view the supporting documents.

Original Course

Action Mapping

Design Proposal

Storyboard

My Design Process

To ensure an effective and engaging learning experience, I structured the simulation using Gagné’s Nine Events of Instruction, integrating interactivity and real-world application while maintaining an LMS-free, software-independent approach.

1 - GAIN ATTENTION:
The simulation opens with a compelling cybersecurity threat scenario, emphasising the risks of phishing attacks in a corporate environment.

2 - INFORM LEARNERS OF OBJECTIVES:
Clear instructions outline the learning goals: identifying phishing emails, responding appropriately, and reinforcing cybersecurity best practices.

3 - STIMULATE RECALL OF PRIOR KNOWLEDGE:
Learners can choose to refresh their knowledge through a cybersecurity overview or jump straight into the quiz, with opportunities to revisit skipped content.

4 - PRESENT THE CONTENT:
Instead of static slides, content is embedded within an interactive inbox simulation, where learners encounter realistic phishing attempts.

5 - PROVIDE LEARNER GUIDANCE:
Hover effects reveal additional details, such as hidden URLs and sender information, teaching learners how to spot phishing clues in real time.

6 - ELICIT PERFORMANCE:
Learners apply their skills by analysing an inbox filled with emails, using interactive elements, animated email effects, and clickable decision points to determine which messages are scams.

7 - PROVIDE FEEDBACK:
Immediate feedback follows each decision, explaining why an email is or isn’t a phishing attempt to reinforce learning.

8 - ASSESS PERFORMANCE:
A pass/fail threshold ensures employees meet compliance standards, with failing users encouraged to review the learning content.

9 - ENHANCE RETENTION AND TRANSFER:
The simulation concludes with key takeaways and best practices, ensuring learners apply their phishing detection skills in real-world situations.

By following Gagné’s framework, I transformed Microsoft PowerPoint into an engaging eLearning experience, balancing structured learning with interactivity, assessment, and real-time feedback—all without the need for specialised eLearning tools.

Mockups

Quiz Option, take quiz or refresher course
eLearn - What is Phishing
eLearn - What Phishing Scams Do?
eLearn - How can Phishing Scams be harmful?
eLearn - Know the Seven Red Flags - Intimidation or Urgency
eLearn - Know the Seven Red Flags - Look for your name
eLearn - Phishing Scams rely on inattention and curiosity
eLearn - Refresher Module Complete
Quiz - Can you spot a phishing scam
Quiz - Question 1 - A file has been sent to you
Quiz - Incorrect Answer Chosen
Quiz - Question 2 - Time to change your password
Quiz - Correct answer chosen
Quiz - Autofail Page - Opened a dangerous link
Quiz - Question 5 - Action Required
Quiz - Results Page