Anti-Phishing Phil: The Design and Evaluation of a Game That Teaches People Not to Fall for Phish

In this paper, the authors describe the design and evaluation of Anti-Phishing Phil, an online game that teaches users good habits to help them avoid phishing attacks. They used learning science principles to design and iteratively refine the game. They evaluated the game through a user study: participants were tested on their ability to identify fraudulent web sites before and after spending 15 minutes engaged in one of three anti-phishing training activities (playing the game, reading an anti-phishing tutorial they created based on the game, or reading existing online training materials).