PHISHING SIMULATION
This was a test — and you're safe.
Nothing left your account. ADFCA's security team sends simulations like this so everyone gets better at spotting the real thing. Here's what gave this one away.
Only the security team sees this result. It's used for training — never for discipline.
The email you clicked
IT1
IT Support Desk
it-support@adfca-gov.ae
Action required: reset your MFA
Dear colleague, our records show your multi-factor authentication expires today. To avoid losing access to Outlook and Teams, verify your account within 2 hours.
Verify accountadfca-verify.net/login3
3 signs you can spot next time
- 1A look-alike domainadfca-gov.ae swaps the dot for a dash. Real ADFCA mail comes from adfca.gov.ae.
- 2Pressure to act fast"Within 2 hours" is there to rush you past your doubts. IT never sets deadlines like this.
- 3A link that doesn't matchHover before you click: the button leads to adfca‑verify.net, not an ADFCA site.
Lock it in with a 3-minute refresher
Assigned to you now · earns the Phish Spotter badge and 120 points