ScamDrill

ScamDrill is a scam-awareness training service for families and organizations. It uses simulated messages and follow-up lessons to help learners recognize scams. Family exercises cover email and SMS; organization simulations also include QR code scams. The exercises adapt to each learner’s performance, with difficulty increasing as skills improve. A dashboard tracks progress, scams caught, and areas that need more practice. Family members can forward suspicious emails or texts for AI analysis, included with the Family plan. Organization plans support roster sync with Okta, Azure AD, and Google Workspace; Enterprise adds a REST API and webhooks. ScamDrill says its data is encrypted in transit and at rest, with database-level tenant isolation and passkey-based two-factor authentication. It also says simulated landing pages do not capture, transmit, or store anything learners type. A free plan is listed, with paid plans for families and organizations. The Family plan is listed at $5.25 a year, billed annually at $63 and renewing at the standard $84/yr.

ScamDrill combines simulated scam messages with learner tracking and follow-up training for both families and organizations. Check the plan limits and renewal terms to see whether its included features fit your needs.

ScamDrill suits families training teenagers or older adults, and organizations preparing employee teams to spot scam messages. The Family plan includes AI message checking, while organization plans offer team-oriented features such as roster sync and compliance reports.

ScamDrill uses simulated scam messages and follow-up lessons to train families and employee teams. It suits households that want email and text practice, and organizations seeking adaptive exercises with progress tracking. Its strongest case is the combination of learner-specific drills and family message checking; organization buyers should weigh the useful controls against the annual cost and renewal increases.

Overview

ScamDrill helps learners recognize scams through realistic but safe simulations. Family drills use email and SMS, while organization exercises also cover QR code scams. The simulations adapt to performance and increase in difficulty as skills improve, so the program can serve learners at different levels rather than keeping everyone on a fixed sequence.

A dashboard tracks progress, scam types caught, and areas needing practice. ScamDrill also offers interactive awareness content, phishing simulations, automated campaigns, and risk scoring. The product says simulated landing pages do not capture, transmit, or store anything a learner types, an important safeguard for training that imitates suspicious links.

Key features

• Adaptive practice: Exercises respond to learner performance and grow more difficult as skills improve. That makes the training more useful for mixed-experience households and teams than a single static lesson path.
• Progress tracking: The dashboard surfaces progress, scam types caught, and weak areas, helping families and administrators identify where additional practice may matter.
• Family message checking: Family members can forward suspicious emails or texts for AI analysis. It is included in Family, while Free users can add it for $2.99 a month.
• Organization administration: Organization rosters can sync with Okta, Azure AD, and Google Workspace. Enterprise adds a REST API and webhooks, making that tier the relevant option for organizations needing those connections.
• Security and privacy: ScamDrill says data is encrypted in transit and at rest, uses database-level tenant isolation, and supports passkey-based two-factor authentication. The company says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001, and HIPAA.

Pricing

ScamDrill has a free plan and paid options, with a free trial also offered. The Free plan costs nothing and is tightly capped at one learner, one email drill per month, and Beginner difficulty. It includes a progress dashboard and real-time alerts, so it is a low-commitment way to begin, but it does not provide the broader drill volume or difficulty progression of paid tiers.

The AI Analysis add-on costs $2.99 a month on Free and adds AI-powered email checking. Families who also want SMS drills, a larger scam library, and multiple learners will get more from Family: $5.25 a year, billed annually at $63, for four learners, email and SMS drills, the full scam library, iPhone and Android apps, AI message checking, and priority support. It renews at the standard $84/yr, so the renewal price is materially higher than the initial annual billing amount.

Organization plans increase capacity and administration, but their annual commitments are much larger:

• Starter: $336.75 a year for 2–25 seats, email simulations, Autopilot, adaptive training, compliance reports, and helpdesk support. It renews at the standard rate after year one ($449 shown). Its seat range makes it the entry point for smaller teams, but larger groups will need another tier.
• Team: $1,124.25 a year for up to 100 seats, with the Starter feature set and additional seats available in blocks of 100. It renews at the standard rate after year one ($1,499 shown). This suits teams that exceed Starter's range, though the block-based expansion may be more capacity than a smaller group needs.
• Business: $4,499.25 a year for up to 500 seats, everything in Team, AI scam detection, campaign scheduling, and departments. SSO/SCIM is an add-on at $2,500/yr. It renews at the standard rate after year one ($5,999 shown), so buyers should budget for both the higher renewal and any identity-management add-on.
• Enterprise: $14,999.25 a year for up to 2,500 seats, everything in Business, white-label branding, LMS API, and priority support. SSO/SCIM is a $2,500/yr add-on. It renews at the standard rate after year one ($19,999 shown). This is aimed at large organizations that need the higher seat ceiling and added integration options, not small teams looking for a modest awareness program.

Platforms

ScamDrill supports Android, iOS, web, and API. The Family plan specifically includes iPhone and Android apps, while the API and organization roster connections are more relevant to organizations integrating training into their operations.

Who it's for

ScamDrill is a strong fit for families training teenagers and older adults, particularly when household members want to check questionable messages as they arise. Its four-learner Family plan and email-plus-SMS drills address that use directly. For employee teams, adaptive simulations, reporting, roster sync, and larger seat tiers make it relevant when scam recognition is a recurring training need. It is less compelling for organizations that need only occasional basic instruction and cannot justify the annual plan costs.

Pros and cons

• Pro: Adaptive simulations and progress reporting connect practice to individual performance, helping identify where learners need more work.
• Pro: Family combines four learners, email and SMS drills, and AI message checking, covering both practice and suspicious messages encountered outside training.
• Pro: Organization roster sync supports Okta, Azure AD, and Google Workspace, with Enterprise API and webhook options for larger environments.
• Con: Free is limited to one learner, one monthly email drill, and Beginner difficulty, so it offers little room for sustained or multi-person training.
• Con: Organization plans have substantial annual prices and higher standard renewal amounts after year one; SSO/SCIM also costs extra on Business and Enterprise.
• Con: Family renews at $84/yr after annual billing at $63, which narrows the appeal of its initial price for households planning to keep the service.

Alternatives

Cybersecurity Training Platforms is a useful starting point for readers comparing options across the category. Wizer is worth considering if a free option with basic annual security awareness training, basic user management, limited reporting, and reminder emails is enough. Choose Proofpoint Email DLP and Encryption if you are evaluating that paid product instead. Boxphish may suit a buyer prioritizing a low per-user annual entry price: its Lite plan is £5 a year per user and includes 12 phishing simulations and 12 training topics. Hoxhunt is another paid alternative. Brightside AI may appeal to buyers seeking a free courses tier or voice-only and hybrid attack simulations, with its Vishing standalone plan starting at €1 a month per seat. PhishSkill offers a free 30-day Starter period with five campaigns per month and email and WhatsApp simulations, then charges per user monthly without a shown amount. Mimecast Data Leak Prevention is a paid option with custom pricing. CyberHoot is another freemium alternative, with a paid Autopilot plan at $125 a month.

Verdict

Choose ScamDrill if your household needs repeated email and SMS practice plus AI checks of suspicious messages, or if your organization wants adaptive training with learner tracking and integrations. The main reason to choose it is that it joins simulations to targeted follow-up and practical progress signals. Look elsewhere if you need only low-cost basic training, or if the organization-tier renewals and seat costs do not fit your budget.