Skip to content
SPECIFICTION
Get listed

ScamDrill

scamdrill.com

From $2.50/mo Free plan WebiOSAndroidAPI
Visit scamdrill.com
Spec score 8.6 #3 of 32 in Cybersecurity Training Platforms

What it is

ScamDrill trains families and organizations to recognize scams through simulated messages and follow-up lessons. Family exercises cover email and SMS, while organization simulations also include QR code scams. The exercises adapt to each learner’s performance, increasing difficulty as skills improve. A dashboard tracks progress, scam types caught and areas that may need more practice. Family members can forward suspicious emails or texts for AI analysis; this message-checking feature is included with the Family plan. Organizations can sync rosters with Okta, Azure AD and Google Workspace, and Enterprise includes a REST API and webhooks. ScamDrill says its data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication. It also says simulated landing pages do not capture, transmit or store what a learner types. The company says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is listed as planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001 and HIPAA.

Spec sheet

What it does
ScamDrill provides safe simulated phishing training, scam checking and progress analytics for families and organizations.Read 14 Oct 2026 · scamdrill.com
Purpose
ScamDrill trains families and organizations to recognize scams through realistic, safe simulations and follow-up lessons.Read 29 Sep 2026 · scamdrill.com
Intended users
The product describes family training for teenagers and older adults, as well as organization training for employee teams.Read 29 Sep 2026 · scamdrill.com
Integrations
Directory synchronization supports Okta, Azure AD/Entra ID and Google Workspace; SAML/OIDC SSO and SCIM are available as an add-on.Read 14 Oct 2026 · scamdrill.com
Security
ScamDrill says data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication.Read 29 Sep 2026 · scamdrill.com
Privacy
The company says it does not sell personal data or share learner data with advertisers or data brokers.Read 29 Sep 2026 · scamdrill.com
Compliance
SOC 2 is listed as planned on the Trust Center; paid organization plans include audit reports exportable for frameworks including SOC 2, ISO 27001, and HIPAA.Read 29 Sep 2026 · scamdrill.com
Support
The Family plan includes priority support; organization Starter and Team list helpdesk support, and Enterprise lists priority support.Read 29 Sep 2026 · scamdrill.com
License
ScamDrill's terms state that simulation templates, lessons and branded materials are its exclusive property, indicating proprietary software rather than open source.Read 14 Oct 2026 · scamdrill.com
Adaptive difficulty
Simulation difficulty is tuned to each learner's performance and age group.Read 14 Oct 2026 · scamdrill.com
Adaptive training
Simulations adapt to each learner’s performance and difficulty progresses as skills improve.Read 29 Sep 2026 · scamdrill.com
AI checking
Users can forward suspicious emails to [email protected] for AI-assisted risk analysis, red flags and recommended action.Read 14 Oct 2026 · scamdrill.com
Android listing
Google Play lists ScamDrill: Scam Checker under developer Gasbuggy Media, with a first release updated August 26, 2026.Read 14 Oct 2026 · play.google.com
API and webhooks
Enterprise includes a REST API and webhooks for learners, campaign activity, reports, threats and remediation lifecycle events.Read 14 Oct 2026 · scamdrill.com
Apple App Store listing
The iPhone app is free with in-app purchases, 65.2 MB, English-language and marked for ages 4 and up.Read 14 Oct 2026 · apps.apple.com
Channels
Family training includes email and SMS simulations, and organization simulations also cover QR code scams.Read 29 Sep 2026 · scamdrill.com
Closed-loop remediation
Remediation events cover assignment, completion and resolution, with webhook events for each stage.Read 14 Oct 2026 · scamdrill.com
Company founder
ScamDrill identifies Justin Fernandez as founder and says he has more than 15 years of US national-security experience.Read 14 Oct 2026 · scamdrill.com
Company legal name and headquarters
Google Play identifies the developer as Scam Drill LLC at 1209 Mountain Road Pl NE Ste N, Albuquerque, New Mexico 87110-7825, United States.Read 14 Oct 2026 · play.google.com
Compliance status
ScamDrill says platform controls and privacy documentation are in production, while SOC 2 is planned rather than completed.Read 14 Oct 2026 · scamdrill.com
Data retention
Forwarded scam checks retain only verdict metadata for 13 months, and security audit logs are retained for one year.Read 14 Oct 2026 · scamdrill.com
Google Play privacy disclosure
The Google Play listing says no data is shared with third parties, data is encrypted in transit and deletion requests are supported.Read 14 Oct 2026 · play.google.com
Independent domain fact
Scam Detector reports the domain was registered on April 4, 2026 and was not detected on blacklist engines.Read 14 Oct 2026 · scam-detector.com
Independent launch
Indie Hackers records the family product launch on June 2, 2026, with the founder describing it as a household version of corporate phishing training.Read 14 Oct 2026 · indiehackers.com
Independent praise: family use
StrictSeal described email and text drills, feedback after clicks and a progress view as useful for protecting relatives.Read 14 Oct 2026 · strictseal.com
Independent praise: practice model
StrictSeal praised the use of realistic harmless scams, immediate explanations and progressively harder drills to build habits.Read 14 Oct 2026 · strictseal.com
Independent revenue claim
The Indie Hackers listing displays revenue of $10K per month.Read 14 Oct 2026 · indiehackers.com
Independent trust score
Scam Detector assigned scamdrill.com a 30.3 out of 100 score and labeled it medium risk.Read 14 Oct 2026 · scam-detector.com
Limit: Android availability inconsistency
The Google Play listing presents an Android ScamDrill checker, while ScamDrill's app page says an Android app is not yet available.Read 14 Oct 2026 · scamdrill.com
Limit: security scope
ScamDrill states it is educational training, not antivirus, a firewall, malware protection, fraud insurance or emergency recovery.Read 14 Oct 2026 · scamdrill.com
Limit: service availability
The terms disclaim guarantees that the service, simulations or verdicts will be uninterrupted, timely, secure, error-free or always delivered.Read 14 Oct 2026 · scamdrill.com
Limit: verdict accuracy
Terms warn that heuristic and AI verdicts can produce false positives or false negatives and must not be the sole basis for consequential decisions.Read 14 Oct 2026 · scamdrill.com
Organization Autopilot
Organization Autopilot schedules drills, assigns lessons after clicks, re-tests employees and emails monthly reports.Read 14 Oct 2026 · scamdrill.com
Progress dashboard
Dashboards show learner progress, scam types caught and areas needing practice.Read 14 Oct 2026 · scamdrill.com
Progress tracking
The dashboard tracks learner progress, scam types caught, and areas needing practice.Read 29 Sep 2026 · scamdrill.com
QR simulations
Organization training includes QR-code phishing (quishing) simulations alongside email drills.Read 14 Oct 2026 · scamdrill.com
Rating on Apple App Store
No rating displayed because the app has not received enough ratings or reviews.Read 14 Oct 2026 · apps.apple.com
Real-time alerts
Guardians and administrators can receive alerts when learners interact with simulations.Read 14 Oct 2026 · scamdrill.com
Realistic simulations
It sends harmless email simulations based on current scam patterns and explains the red flags after interaction.Read 14 Oct 2026 · scamdrill.com
Safe simulations
The security FAQ says simulated landing pages do not capture, transmit, or store anything a learner types.Read 29 Sep 2026 · scamdrill.com
Scam reporting
Users can submit anonymous scam reports that are reviewed by a person before any redacted summary is published.Read 14 Oct 2026 · scamdrill.com
Screenshot checker
The mobile checker extracts text from screenshots on the device so the image itself is not uploaded.Read 14 Oct 2026 · scamdrill.com
SDKs and self-hosting
The opened product pages describe a REST API and webhooks but do not identify SDKs or a self-hosted deployment.Read 14 Oct 2026 · scamdrill.com
Security controls
The trust center states TLS and at-rest encryption, database row-level tenant isolation, passkey two-factor authentication, signed HMAC-SHA256 webhooks and strict security headers.Read 14 Oct 2026 · scamdrill.com
SMS tips
Family plans include opt-in scam-prevention tips by SMS for US, Canadian and US-territory numbers; simulated scams are email-only.Read 14 Oct 2026 · scamdrill.com
System requirement
The iPhone app requires iOS 16.4 or later and also runs on Apple-silicon Macs and Apple Vision Pro.Read 14 Oct 2026 · scamdrill.com

Plans and prices

Free Free Email drills: 1/month · 1 learner · Beginner difficulty · Progress dashboard · Real-time alerts Read 29 Sep 2026 · scamdrill.com
Free Free $0/mo 1 learner · 1 basic email drill/month · beginner difficulty · progress dashboard · real-time alerts Read 14 Oct 2026 · scamdrill.com
AI Analysis add-on $2.99 a month $2.99/mo AI-powered scam checking for Free accounts Read 14 Oct 2026 · scamdrill.com
Family $9 a month $9/mo; 25% first-year sale shown as $6.75/mo 4 learners · extra learners $2/mo · email and SMS tips · full library · AI checking · reports · priority support Read 14 Oct 2026 · scamdrill.com
AI Analysis add-on $29.99 a year $29.99/yr AI-powered scam checking for Free accounts Read 14 Oct 2026 · scamdrill.com
Family $84 a year $84/yr; 25% first-year sale shown as $63 4 learners · extra learners $19/yr · email and SMS tips · full library · AI checking · reports · priority support Read 14 Oct 2026 · scamdrill.com
Starter $449 a year $449/yr standard; $336.75 first year shown 2–25 seats · email simulations · Autopilot · adaptive training · compliance reports · helpdesk support Read 14 Oct 2026 · scamdrill.com
Team $1,499 a year $1,499/yr standard; $1,124.25 first year shown Up to 100 seats · Team features · extra seats $1.25/mo in 100-seat blocks Read 14 Oct 2026 · scamdrill.com
Business $5,999 a year $5,999/yr standard; $4,499.25 first year shown Up to 500 seats · AI detection · campaigns · departments · SSO/SCIM add-on $2,500/yr Read 14 Oct 2026 · scamdrill.com
Enterprise $19,999 a year $19,999/yr standard; $14,999.25 first year shown Up to 2,500 seats · white-label branding · LMS API · priority support · SSO/SCIM add-on $2,500/yr Read 14 Oct 2026 · scamdrill.com

Every ScamDrill plan and price →

Strong points and limits

Strong points

  • Family exercises cover email and SMS.
  • Organization simulations include QR code scams.
  • Training adjusts to learner performance.
  • Dashboard tracks progress and practice areas.
  • Enterprise includes an API and webhooks.

Limits

  • Free plan allows one learner.
  • Free plan limits email drills to one monthly.
  • SOC 2 is listed as planned.

Who it suits

ScamDrill is aimed at families training teenagers and older adults, as well as organizations training employee teams. Family message checking and organization roster sync serve different use cases.

ScamDrill in depth

Read the full write-up

ScamDrill is a scam-awareness training service for households and employee teams. It is most compelling for families who want practice across email and text, and organizations that need adaptive exercises and progress tracking. The family message-checking feature is a useful extra, while organization pricing rises quickly beyond the smallest teams.

Overview

Rather than relying only on courses, ScamDrill combines safe simulations with follow-up lessons. Family exercises use email and SMS; organization exercises also cover QR-code scams. Difficulty adjusts to each learner’s performance, so the training can advance as skills improve instead of leaving experienced learners on beginner material.

A dashboard tracks progress, scam types caught, and areas needing practice. ScamDrill also includes phishing simulations, interactive awareness content, automated campaigns, and risk scoring. Those capabilities suit teams seeking more than a one-off awareness course, though the plan descriptions do not assign every capability to a specific tier.

Key features

Families can forward suspicious emails or texts for AI analysis. That check is included with Family, or available to Free users as a $2.99 a month add-on. It gives households a way to seek a second opinion on a questionable message, but the Free plan’s single monthly drill and one learner limit how much training the household can do without upgrading.

Organization rosters sync with Okta, Azure AD, and Google Workspace. Enterprise adds a REST API and webhooks, which matter most to organizations that need to connect training with other systems. ScamDrill says it encrypts data in transit and at rest, isolates tenants at the database level, and supports passkey-based two-factor authentication. It also says it does not sell personal data or share learner data with advertisers or data brokers. Simulated landing pages do not capture, transmit, or store anything a learner types. SOC 2 is planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001, and HIPAA.

Pricing

The Free plan costs nothing and includes one email drill per month, one learner, beginner difficulty, a progress dashboard, and real-time alerts. It is a reasonable way to try basic training, but its low drill quota and fixed beginner level make it a poor fit for a household or team that wants sustained practice. The AI Analysis add-on costs $2.99 a month and adds AI-powered email checking.

Family costs $5.25 a year, billed annually at $63, then renews at the standard $84/yr. It covers four learners, email and SMS drills, the full scam library, iPhone and Android apps, AI-powered message checking, and priority support. Its broader channel coverage and message checking make it the natural household choice over Free; families should account for the higher standard renewal price.

Organization plans are discounted for year one and renew at higher standard rates. Starter costs $336.75 a year, then renews at $449 after year one; it supports 2–25 seats with email simulations, Autopilot, adaptive training, compliance reports, and helpdesk support. It is the entry point for small teams, but has no stated SMS or QR-code coverage. Team costs $1,124.25 a year, then renews at $1,499; it supports up to 100 seats and adds seat blocks of 100 to the Starter feature set. That larger capacity suits growing teams, though the next seats come in sizable increments.

Business costs $4,499.25 a year, then renews at $5,999; it supports up to 500 seats and adds AI scam detection, campaign scheduling, and departments to Team features. SSO/SCIM is a $2,500/yr add-on. Enterprise costs $14,999.25 a year, then renews at $19,999; it supports up to 2,500 seats and adds white-label branding, an LMS API, and priority support to Business features, with the same $2,500/yr SSO/SCIM add-on. These tiers suit larger organizations that need capacity and administration features, but the step up in annual cost is substantial. A free trial is also offered.

Platforms

ScamDrill supports Android, iOS, web, and API. The Family plan specifically includes iPhone and Android apps; organizations can use roster sync integrations, while Enterprise provides API and webhook access.

Who it's for

Families with teenagers or older adults are the clearest fit for Family: four learners can practice with email and SMS, and AI checking adds a practical route for reviewing suspicious messages. Employee teams benefit from adaptive training and progress reporting, especially when they need roster sync or compliance report exports. Free is better treated as a limited introduction than a complete training program.

Pros and cons

Pros: Adaptive difficulty and follow-up lessons make practice more responsive than a fixed sequence.

Pros: Family combines four seats, email and SMS drills, and AI message checking for a household-focused package.

Pros: Organization roster sync and exportable compliance reports support common administrative needs.

Cons: Free allows only one learner and one monthly email drill at beginner difficulty.

Cons: Organization plans have higher standard renewal prices after the first year, and SSO/SCIM costs an additional $2,500/yr on Business and Enterprise.

Cons: Starter’s listed simulations are email-only, a narrower channel mix than the family offering.

Alternatives

Cybersecurity Training Platforms is a useful category starting point for comparing training services. Consider Wizer if a free basic security-awareness plan with limited reporting and learner reminders is the priority. Brightside AI is an alternative with a free courses plan and standalone vishing simulations from €1 a month. PhishSkill offers a 30-day free Starter period with email and WhatsApp simulations before per-user monthly pricing applies. Proofpoint Email DLP and Encryption is another paid option. Boxphish has a Lite plan at £5 a year per user with 12 phishing simulations and 12 training topics. Breach Secure Now is another paid option with a free trial. CAPS by Cypherdote offers a Standard plan at $59 a month with 10 users and 150 simulation and assessment credits. CyberHoot is a freemium alternative with a paid Autopilot plan.

Verdict

ScamDrill is a strong fit for households that want realistic email and SMS practice plus a way to check suspicious messages, and for organizations that value adaptive exercises and measurable progress. Choose Family for the clearest feature-to-price match; consider another option if an organization needs lower recurring costs or broader simulation channels at its entry tier.

Verdict

ScamDrill pairs scam simulations with adaptive follow-up and progress tracking. Families and organizations should compare the different channels and plan limits relevant to their training.

Where Specifiction places it

Alternatives to ScamDrillAll alternatives →