The Cyber Empowerment Hub
Staying safe online shouldn't mean paying a consultant or hiring someone to watch your back. We teach the everyday skills that stop attacks before they start, at a price that works for a person, a family or a small team.
Four things in this email give it away. See how many you can find.
Delivery attempt failed. Item NV‑4471902 is being held
Norvale Parcel
We attempted to deliver your parcel this morning. You were out. Or you were in. We did not actually check.
Your item is being held at our depot until you settle an outstanding shipping surcharge of £1.45. We know. We have built an entire criminal enterprise around one pound forty-five and we are as surprised about it as you are.
Thank you for choosing Norvale Parcel, which you did not do.
Norvale Parcel Services Ltd, Unit 12 Ardsley Way, Hemel Hempstead HP2 7QN.
You are receiving this because you have an active shipment. Unsubscribe · Privacy notice
It says Norvale Parcel Delivery. It came from phishy-mcphishface.biz.
A display name is just a label the sender types in, and they can type anything
they like. The address is the bit that is hard to fake, which is why it is the
bit worth reading.
A courier that genuinely had your parcel would have your name. Generic greetings are how you spot a message sent to a hundred thousand people at once.
Urgency is the whole trick. A deadline is there to stop you checking, because a person who is rushing does not hover the link or read the address. Any message that gives you a countdown is asking you to skip the step that would catch it. Real companies are content to wait.
The button says reschedule my delivery. It goes to phish-and-chips.biz.
Hover a link before you click it and the real destination shows up at the bottom
of the screen. On a phone, press and hold. This one is not subtle, but a real one
would be a character or two out from the name you expect.
That is the skill.
This is the kind of practice that teaches you to tell a phishing email from a real one. Not by learning a list of rules, but by seeing enough of them that the wrong ones start to feel wrong.
We want you safe every time you open your inbox, without having to think about it.
See how I do3.4
billion
Phishing emails are sent every single day, worldwide.
Industry estimate, 2025
#1
cybercrime
Phishing is the most-reported cybercrime on the planet, more than double the next category.
FBI IC3 Report, 2025
82%
written by AI
Of phishing emails are now written by AI, which makes them cheaper, faster and more convincing.
Industry analysis, 2025
the hook is the bit you don't see
Most attacks don't beat you with genius. They catch you off guard. The fixes are the low-hanging fruit: knowing the signs, pausing before you act, practising until the good habits are automatic.
That shouldn't cost thousands or need an IT department. A bank trains its staff. Nobody trains your mum. So we took the training that protects big companies and put it in everyone else's hands.
Delivery
Emails modelled on the scams doing the rounds right now. Fake delivery notices, password resets you never asked for, invoices from suppliers you have never used. Harmless versions of the real thing, turning up at random so you cannot see them coming.
a sender you don't know, a link you didn't ask for
Feedback
Slip up and you get a friendly page explaining the tell-tale signs. No shame. Just the lesson, at the moment it sticks.
the address rarely matches the name
Progress
Simple progress over time, and a report at the end of every month showing what you spotted, what caught you out, and where you are getting better. Nothing to log into every day. It just adds up.
your first report lands after a month
Difficulty
Starts gentle and steps up as you improve, from obvious to hard to spot. You'll notice the point where they stop being easy.
the last level catches people who know better
01
Tell us where to send your practice. No downloads, no account to wrangle, no app on your phone.
02
One tap tells your email provider the practice is wanted, so it reaches your inbox rather than your spam folder. We'll show you exactly where the button is. It's optional, and it takes seconds.
Individual or business, the price per person is the same. One person and a fifty-person business pay the same rate, because it is the same practice.
Pay yearly and you get two months free. Cancel whenever you like, and we will not make you ring anybody.
less than a cup of coffee