How it works
Receive drills, get coached, see progress.
A fire drill isn't a lecture, it's a simulation that builds reflexes for the real thing. Here's what happens after you enroll in ScamPrep.
-
Enroll with consent.
You sign up and your loved one opts in, always. Tell us a bit about them (email, phone, the scams they've seen before). They are up and running in two minutes, and there's nothing for them to install.
-
We run safe, realistic drills.
On an unpredictable schedule, we send practice versions of the same scams circulating right now, by email, text, and phone. Drills are modeled on the latest tactics reported to the FBI and FTC.
-
Coaching in the moment when they slip.
If your loved one clicks, nothing bad happens. A friendly page opens instead, providing a specific, usable lesson in thirty seconds. No lecture, no shame. Research shows this moment is when the lesson sticks.
-
Briefings on the newest scams.
Alongside the drills, quick snippets on what's newly circulating and the tells to look for, sent through the channels they already use. Each one takes less than two minutes to read. Because briefings refresh continuously from what's reported to the FBI and FTC, recipients hear about new scams while they're still new.
-
You get the Resilience Report.
Every quarter: drills we ran, which were caught, which were missed, and their scam resilience trend over time. Proof the practice is working, and an early look at any type of scam that keeps getting through.
What a drill actually looks like
The “account locked” email. Dad gets an email that looks like it's from a bank: “Unusual sign-in detected. Verify your account within 24 hours.” If he pauses, checks the sender, and deletes or reports it, that's a win on his Resilience Report. If he clicks, a calm page opens: “This was a ScamPrep practice drill. Real banks never ask you to ‘verify’ through an email link. Here are the three tells you can check in five seconds.” Total time: under a minute.
The practice “grandparent” call. The phone rings, and a voice that sounds like her grandson says he's been in an accident, needs money for bail, and please don't tell his parents. The voice is an AI clone, and the call is simulated. If she hangs up and calls his real number, that's a win on her Resilience Report. If she stays on the line, the voice drops the act: “This was a ScamPrep practice call. Scammers can copy a voice from a few seconds of audio. The counter-move: hang up and call the real number, every time.”
The practice “Social Security” text. A text arrives: “SSA notice: your Social Security number has been suspended due to suspicious activity. Call this number within 24 hours to avoid losing benefits.” If she ignores it or reports it, that's a win. The moment she calls or taps, the coaching kicks in: “Social Security never suspends numbers, and never texts you to call back. The counter-move: hang up and call the number on ssa.gov, or ask a family member to check with you.”
Every drill is modeled on current tactics reported to the FBI, FTC, and state regulators, updated monthly as scams evolve.
The cadence of drills
Drills arrive on an unpredictable schedule: typically 4–6 per month, mixed among real messages so the practice is honest. Unpredictability is the point. Real scams don't make appointments.
Frequency and type of drills adapt to your loved one: more reinforcement on scam types they've missed, lighter touch once instincts are strong.
The briefings: a quiet drip of education
Alongside the drills, we send very brief snippets: the newest scams in circulation and the tells to look out for. Each one takes less than two minutes to read, and they're spaced over time so the warnings stay fresh instead of fading the way a one-time seminar does.
Because drills and briefings refresh continuously based on reports to the FBI and FTC, the person you care about hears about new scams while they're still new, often before they've hit the local news.
What's in the Resilience Report
Delivered every three months to you and your loved one:
- Every drill we ran, and how it went: caught, ignored, or coached
- A plain-English resilience status ("strong," "mostly strong") and how it's trending over time
- The scam types we're reinforcing next, and why
- A quick briefing on the quarter's most-reported scams
A gentle early-warning system
Research finds performance on simulated scam tests correlates with memory and real-world risk. A gradual decline in resilience doesn't diagnose anything but can spark a helpful conversation by providing an early signal families often wish they'd had. We surface it quietly, privately, and only to you and the learner.
Illustrative report
Mary’s Resilience Report
Fall
Spotted 12 of 15 practice scams this quarter
- Fake sheriff impersonation text ignored
- Prize-sweepstakes email deleted
- Fake family emergency call hung up
- Utility “past-due” email ignored
- Fake tech support email responded & coached
Plus: 10 more drills, and briefings on the newest scams in circulation
Which channels drills use
Email: on from day one.
Text and phone: added with their express written consent. Includes AI-voice calls (also known as “deepfakes”) like the “grandparent scam.”
Paper mail: coming soon.
Text and voice simulations are regulated under federal telemarketing law. We built our consent process to exceed those requirements.
Ready to run the first drill?
Join the early-access list to protect your loved one.