ScamDrill

Overview

ScamDrill trains people to recognize scams through safe simulations and follow-up lessons. Family exercises use email and SMS; organization exercises add QR-code scams. The adaptive approach adjusts to each learner’s performance and raises the difficulty as skills improve, which can suit groups with mixed experience better than a fixed sequence. A dashboard tracks progress, scam types caught, and areas needing practice, giving families and administrators a view of where learners may need more attention.

Families can forward suspicious emails or texts for AI analysis. ScamDrill says simulated landing pages do not capture, transmit, or store anything a learner types. It also says data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication, and that it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is planned; paid organization plans include audit report exports for frameworks such as SOC 2, ISO 27001, and HIPAA.

Key features

• Adaptive simulations: Exercises respond to performance and become harder as skills improve, offering a more tailored practice path.
• Progress tracking: The dashboard shows learner progress, scams caught, and practice areas, helping identify where additional training may be useful.
• Family message checking: Forward suspicious email or text for AI analysis. It is part of Family, while Free users can buy it as a separate add-on.
• Organization administration: Roster sync supports Okta, Azure AD, and Google Workspace. Enterprise adds a REST API and webhooks.
• Security and reporting: ScamDrill describes encryption, tenant isolation, and passkey-based two-factor authentication. Paid organization plans include audit report exports, though SOC 2 itself is planned rather than current.

Pricing

ScamDrill uses a freemium model, with a free plan and paid plans. Prices and renewal terms make the annual commitment important to weigh against seat limits and included capabilities.

• Free — 0.00 USD per free: One learner, one email drill per month, beginner difficulty, a progress dashboard, and real-time alerts. The tight drill and learner caps make it suitable for limited individual use, not regular household or team training.
• AI Analysis add-on — 2.99 USD per month: Adds AI-powered email checking to Free. Family includes AI-powered message checking, so households comparing the two should consider the Family plan’s four-learner limit and annual billing.
• Family — 5.25 USD per year: Billed annually at $63 and renews at the standard $84/yr. It covers four learners, email and SMS drills, the full scam library, iPhone and Android apps, AI-powered message checking, and priority support. This is the clearest fit for a household wanting shared practice, but the renewal price is higher than the initial annual bill.
• Starter — 336.75 USD per year: Covers 2–25 seats, email simulations, Autopilot, adaptive training, compliance reports, and helpdesk support. It renews at the standard rate after year one ($449 shown). The seat range suits a smaller employee team; it does not include the broader features assigned to higher plans.
• Team — 1124.25 USD per year: Covers up to 100 seats, with email simulations, Autopilot, adaptive training, compliance reports, and additional seats in blocks of 100. It renews at the standard rate after year one ($1,499 shown). This extends Starter for larger teams, but growth beyond the cap requires another block.
• Business — 4499.25 USD per year: Covers up to 500 seats and everything in Team, plus AI scam detection, campaign scheduling, and departments. It renews at the standard rate after year one ($5,999 shown). SSO/SCIM is an add-on at $2,500/yr, so organizations needing it should include that cost in their decision.
• Enterprise — 14999.25 USD per year: Covers up to 2,500 seats and everything in Business, plus white-label branding, LMS API, and priority support. It renews at the standard rate after year one ($19,999 shown); SSO/SCIM is an add-on at $2,500/yr. Its added scale and integration options are aimed at larger organizations, not small teams.

A free trial is offered. Organization Starter and Team include helpdesk support, while Enterprise includes priority support; Family also includes priority support.

Platforms

ScamDrill supports Android, iOS, web, and API. The Family plan specifically includes iPhone and Android apps; Enterprise includes an LMS API, and the Enterprise integrations also include a REST API and webhooks.

Who it's for

ScamDrill is a practical fit for families training teenagers and older adults, particularly when members want to check suspicious messages as well as practise spotting them. For organizations, its adaptive exercises, progress dashboard, roster sync, and compliance report exports serve employee teams that need ongoing awareness training. It is less compelling for anyone seeking only a low-cost, high-volume organization option: the paid team plans carry substantial annual prices, and seat limits shape the step up between tiers.

Pros and cons

• Pro: Family training covers both email and SMS, and includes AI message checking, bringing practice and suspicious-message review together for up to four learners.
• Pro: Adaptive difficulty and progress tracking can help households and administrators see both learner progress and areas to revisit.
• Pro: Organization roster sync with Okta, Azure AD, and Google Workspace reduces the need to manage rosters separately.
• Con: Free is limited to one learner and one beginner email drill monthly, so it offers little room for sustained household practice.
• Con: The Family annual price renews at $84/yr after billing at $63, and organization plans also show higher standard renewal rates after year one.
• Con: SSO/SCIM costs an additional $2,500/yr on Business and Enterprise, a material extra for organizations that require it.
• Con: SOC 2 is planned, so organizations requiring current SOC 2 status should not treat audit report exports as equivalent certification.

Alternatives

Cybersecurity Training Platforms offers a broader category view for comparing options. Consider Wizer instead if a free plan with basic annual security awareness training, basic user management, limited reporting, and automatic learner reminders better matches your needs. Brightside AI may suit those looking for courses on a free Start plan or voice-only and hybrid attack simulations from €1/ m. per seat. CyberHoot is an alternative with an Autopilot plan priced at 125.00 USD per month, including white-label functionality, multi-tenancy, automated platform features, interactive HootPhish training, videos, and dark web features.

Hoxhunt, Mimecast Data Leak Prevention, Proofpoint Email DLP and Encryption, Check Point MDR/MPR, and OpenText Core Email Encryption are also options to consider.

Verdict

Choose ScamDrill if your household wants guided email and SMS scam practice with AI message checks, or your organization values adaptive exercises and progress tracking. Its main advantage is connecting simulations to follow-up learning and measurable progress. Look elsewhere if the annual organization costs, seat-based tiers, or planned rather than current SOC 2 status do not suit your needs.