I finally hit 2 years without a single successful phishing attempt

I run a small roofing crew in Cleveland, and last week I realized none of my guys have clicked a phishing link since I started testing them in 2022. That's 24 months straight of passing fake emails from a security service I pay $15 a month for. The secret was just running a 5 minute training every Monday morning with real examples from actual attacks on contractors. Anyone else found a simple habit that actually stuck with their team?

2 comments

2 Comments

markh851mo ago

Nah man that's actually impressive. A buddy of mine runs a landscaping company in Buffalo and he thought he was safe until one of his guys clicked a fake "invoice overdue" email last winter. Cost him like 800 bucks before he even realized what happened. He started doing the exact same thing you're describing - just 10 minutes every Tuesday morning going over the latest scams hitting small contractors. Some of his older guys complained at first but now they're the ones catching the fake emails before anyone else. The Monday morning habit is REAL smart honestly, keeps it fresh in their heads instead of that once a year training nobody remembers.

paul_taylor211mo ago

My $15 a month security service does the same thing for my crew in Akron, and I gotta say the Monday morning thing is the real MVP here. I tried the yearly seminar route for years and watched guys forget everything by March. The secret sauce nobody talks about is making it a habit instead of a punishment, you know? I actually found something else that helped a ton. I started posting screenshots of the fake emails on the break room bulletin board with a red circle around the telltale signs. Now the guys compete to see who can spot the new one first during lunch. It turned into a game instead of a chore and now my 58 year old foreman catches things faster than the 20 year olds.