N
Noble Hummingbird
One of our clients would like the option to run “silent” phishing simulations without immediately revealing that the email was simulated. Ideally, administrators could independently disable:
The “Congratulations, you caught a simulated phish” response when a user reports the email.
The “Oops, you clicked on a simulated phishing link” message or Learning Moment after a user clicks.
Phin should continue recording reports, clicks, and other activity in the administrative portal, but end users would not receive immediate confirmation that the message was part of a simulation.
This would allow organizations to conduct blind baseline assessments or measure whether users follow internal reporting and escalation procedures without the results of earlier simulations influencing later participants.
Ideally, this could be configured at the campaign level, including for Continuous Phishing Campaigns, while leaving Phin’s current real-time feedback behavior as the default.
Please consider submitting this to the product team for future development.
Thank you.