Don't Click That!
A no-nonsense guide to spotting scams, phishing & social engineering — the manual people wish their team had read before they handed their business to criminals.
The most expensive vulnerability on your network isn't your firewall. It's a person. Clicking a link. Opening an attachment. Wiring money because an email said to.
Free account required · Receipt & download links emailed instantly
The Reality
It doesn't matter how good your security software is. One employee clicking one bad link bypasses all of it in a single second.
And the emails don't look like scams anymore. In 2025, AI-powered phishing rose by 400%. The spelling mistakes are gone. The dodgy formatting is gone. The emails look like they came from your bank, your supplier, your boss — because someone spent five minutes on your LinkedIn profile and wrote one specifically for you.
It's like fitting a state-of-the-art lock and handing the key to anyone who knocks.
Two Books. One Goal. A Team That Doesn't Fall For It.
"Don't Click That!" is a course, not just a book. It comes in two parts that work together — the manual teaches, the workbook trains. Sold together because they belong together. One without the other is like reading the driving theory and never getting behind the wheel.
The Course Manual
34 pages · 15 chapters
Real-world scam breakdowns — how they work, what they look like, exactly what to do when you spot one. Every chapter ends with a clear action list. No theory. No fluff.
The Course Workbook
25 pages · 16 exercises
Hands-on exercises — fake phishing emails to analyse, vishing scripts to dissect, role-play scenarios for your team, and a monthly quiz template you can reuse. Practising spotting scams is what actually keeps you safe.
What's Inside — The Course Manual
15 chapters. Every scam your team needs to recognise.
Why You're Reading This
$4.88M average phishing breach. 43% of small businesses hit. It almost always starts with a human mistake.
How Scammers Think
They have KPIs, budgets, and customer support. Phishing kits sell for $50 with money-back guarantees. The six emotions every scam exploits.
Classic Phishing Emails
The "Dear Customer" special. Spot fake senders, suspicious links, and urgency traps — even when AI wrote the email.
Spear Phishing
When they know your name, your project, and your colleague's email signature. Targeted, personal, devastatingly effective.
Business Email Compromise
$8.5 billion lost in three years. The CEO didn't send that email. But it looked exactly like he did.
Invoice Fraud
45% of all fraudulent payments. Quiet, boring, and it works because nobody double-checks the bank details.
Vishing
Voice phishing. The phone rings, someone official asks for your verification code. Spoiler: your bank already knows your DOB.
Deepfake Voice Calls
A finance director wired $243,000 because the CEO's voice told him to. Except it was AI. And that was 2019.
Tech Support Scams
Microsoft is not calling you. Neither is Apple. Hang up. This chapter is short because the answer is always the same.
Social Media Scams
Fake support accounts, LinkedIn job scams, giveaway fraud, and cloned profiles. Trust no DM.
Fake Websites & Online Shopping
Lookalike login pages, too-good-to-be-true shops, typosquatting. Check a URL before it checks your bank account.
QR Code Scams (Quishing)
Fake QR codes on parking meters, delivery notices, in emails. You can't see where it leads before you scan. That's the point.
Building a Human Firewall
Train your team without boring them to death. Short, frequent, safe to report. The opposite of a two-hour annual lecture.
Incident Response Cheat Sheet
What to do in the first 15 minutes, the first hour, and the first day. Plus a key contacts table to fill in before you need it.
Quick Reference Guide
A one-page tear-out with universal warning signs and the response protocol. Pin it to the wall.
What's Inside — The Workbook
16 exercises. Because reading about scams isn't the same as spotting them.
Analyse fake phishing emails
Four realistic examples. Spot the red flags. Decide: legitimate or phishing? Harder than you think when AI wrote it.
Inspect a fraudulent invoice
Two invoices side by side. One real, one fake. Find the five differences before you wire money to the wrong account.
Role-play a BEC attack
One person plays the scammer, one the target. Three minutes. See how far social engineering gets aimed at your own team.
Write your own phishing email
Yes, really. The best way to understand how it works is to build one. Then swap with a colleague and try to spot each other's tricks.
Dissect vishing scripts
Three phone call transcripts. Find the red flags. Practise the words you'll use to hang up.
Run the Scam Scenario Gauntlet
Eight real-world scenarios. Sixty seconds each. What do you do? More useful than any security lecture.
Build your incident response card
Fill in your key contacts, reporting process, code word, and payment approval threshold. Before you need them.
Create a one-page security policy
Using everything you've learned. If it's longer than one page, nobody will read it.
For Teams That Have Better Things to Do Than Get Scammed.
You run a business. You have a team. Some of them are careful with emails. Some of them click first and think later. Most of them have never had any training on this — because who has time for that?
Designed for teams of any size, in any industry, with any level of technical knowledge. Written in plain English. The exercises take minutes, not hours. You don't need an IT department — just a printer, a meeting room, and about two hours.
The Numbers Behind the Clicks.
- $4.88 million — average cost of a phishing breach.
- $8.5 billion lost to business email compromise in three years.
- $25 million stolen in a single deepfake video call.
- 57% of businesses hit by BEC attacks in 2024.
- 400% rise in AI-powered phishing in one year.
They weren't stupid. They were busy. They were trusting. They were doing their job.
The scams in this course are real. The red flags are learnable. The difference between a trained team and an untrained one is "we caught it" vs "we wired the money."
What If…
"We already have security software."
Good. This course covers the attacks that security software can't stop — the ones that trick people, not machines. Your firewall doesn't help when someone reads a verification code to a scammer over the phone.
"My team is too small for formal training."
The workbook exercises work with as few as two people. Some are individual. The smaller the team, the more damage one wrong click can do — and the more this matters.
"We don't have time for security training."
The course manual reads in under an hour. The workbook exercises take 5–15 minutes each. You can spread them across a month of five-minute team briefings. You have time. You just haven't been spending it on this.
€39. For Both Books. For Your Entire Team.
You buy it once. You train everyone. Reuse the exercises every month, every quarter, every time you onboard someone new. The average invoice fraud costs thousands. A single BEC attack can empty an account. This bundle is €39.
Buy the Bundle — €39Every scam in this course has worked on someone smart, experienced, and careful. The difference isn't intelligence. It's training.