Templates
Phishing Email Templates & Attack Scenarios
700+ handcrafted phishing email templates, landing pages, and multi-channel attack scenarios — every template built to test one simple habit: does the reader pause, or do they click? Use them as-is, edit every detail, or let AI generate new ones for your organisation.
692+
Attack Templates
What makes a phishing email template effective?
Real attackers don't send random emails — they engineer a psychological trigger and wrap it in a familiar brand. Our phishing templates are built the same way, so your phishing simulation mirrors what employees actually face, from AI-written spear phishing to fake HR requests and invoice fraud.
Urgency
“Your account will be suspended in 24 hours.” Effective phishing email templates manufacture time pressure so the reader clicks before they think. Simulating it teaches employees that urgency itself is the red flag.
Authority
Emails that appear to come from HR, IT, the CEO, or a known brand like Microsoft or Amazon. Authority-based templates test whether employees verify the sender before acting on a request.
Reward & curiosity
Prize draws, bonus announcements, leaked salary sheets, greeting cards. These templates exploit hope and curiosity — the lures employees are least prepared for.
Fear & consequence
Unauthorised login alerts, fraud warnings, unpaid invoice threats. Fear-based phishing templates mirror the highest-converting real attacks, so they belong in every simulation programme.
Every phishing email template pairs with a matching landing page — credential capture, attachment download, or QR scan — and delivers an instant micro-lesson to anyone who clicks, turning a simulated mistake into lasting security awareness.
Browse the phishing template library
A sample of our handcrafted phishing email templates and attack scenarios spanning phone scams, email phishing, social engineering, and more.
Phone Scams
Fake Warranty Extension Scams
Scammers impersonate customer support agents, offering a free warranty extension and requesting personal information.
Utility Company Scams
Impersonating utility companies, scammers threaten service disconnection over unpaid bills and demand immediate payment.
IRS or Tax Scams
Scammers impersonate IRS agents, alleging tax issues, and demand immediate payment, threatening legal consequences.
LIC India OTP Fraud
Fraudsters may ask for OTP to verify if a person is alive or not and scam the victim.
Phony Prize or Lottery Winnings
Call recipients are told they've won prizes and must pay fees or share personal info.
Email Phishing
Amazon
This template simulates a fake email regarding an Amazon purchase confirmation.
eBay Account
This template simulates a message telling users that their accounts have been suspended.
Encrypted Mail
This template invites users to enter credentials to access an encrypted e-mail message.
Gmail
This template stimulates users that someone has accessed their email service.
Apple iCloud
This template simulates the iCloud tracking feature for lost/stolen devices.
Users receive a message inviting them to edit their newly created personal page on LinkedIn.
Healthcare & Finance
Healthcare Scams
Fraudsters impersonate healthcare entities to offer fake services and collect personal and medical data.
Financial Institution Scams
Impersonating the victim's financial institution, the attacker claims suspicious account activity and asks for sensitive details.
Credit Card
Users receive a simulated 'unauthorised credit card access' warning that lures them to click.
Health Promotion
Health promotion from the HR Department. Offers users a free health consultation.
Social Engineering
Job Offer Scams
Scammers offer bogus job offers with enticing benefits, tricking victims into sharing personal information or paying upfront fees.
Fraud Protection Alert
Users are asked to log in to their accounts to verify unusual login activities.
Greeting Cards
The template has a personalised greeting card that can only be viewed after login.
Invites From Friends
This hyperlink-based scenario simulates a friend's invitation to 'like' a social media page.
and 700+ handcrafted attack templates
Access All Templates FreePhishing email template FAQs
What is a phishing email template?
A phishing email template is a pre-built, realistic email used in phishing simulations — it mimics the structure, branding, and psychological hooks of a real attack (a fake invoice, a password-reset request, a delivery notice) so organisations can safely test whether employees click, report, or ignore it. Templates pair with matching landing pages that capture clicks and turn them into teachable moments.
What makes a phishing email template effective?
The best templates exercise a real psychological trigger — urgency, authority, curiosity, or fear — and look exactly like the emails your employees receive every day. Variety matters more than any single template: rotating scenarios across brands, departments and channels prevents employees from learning to spot the tool instead of the threat.
Can I create my own phishing templates in PhishGrid?
Yes. Every template in the library is fully editable with a drag-and-drop editor, and you can import your own HTML or let PhishGrid's AI generate personalised templates from a prompt — including matching landing pages, sender profiles, and attachments.
Are simulated phishing emails legal to send to employees?
Yes — sending simulated phishing emails to your own employees on company systems is legal and a recognised part of security frameworks like ISO 27001 and SOC 2. Keep lures professional (avoid fake bonus or layoff announcements), disclose testing in policy, and never store real credentials.
How many phishing email templates does PhishGrid include?
PhishGrid ships 700+ handcrafted attack templates covering email phishing, spear phishing and BEC, vishing, smishing, QR-code (quishing) and ransomware-delivery scenarios — maintained continuously, with an AI generator for unlimited custom variations. All available on the free plan.
Free. Forever.
Get Lifetime Access to Our Free Phishing Simulation Platform! No credit card. No hidden fees.
Evaluate Your Security Risk