Getting Started

From Download to Cyber Defender in 5 Steps

1

Download and Launch

Grab Cyber Scam Simulator free from the Google Play Store. Choose your character companion and land on the Home screen, where your security awareness score and personalised training recommendations are ready and waiting.
2

Choose Your Threat

Open the Scenarios tab to explore 70 hand-crafted scenarios spanning 8 threat categories: email phishing, SMS scams, phone fraud, social engineering, website spoofing, ransomware, physical security, and IoT attacks. Filter by difficulty - beginner, advanced, or expert - and dive in.
3

Enter the Simulation

Step into fully immersive environments that replicate real-world attacks. Open a realistic email inbox where scam messages arrive randomly, read iMessage-style text conversations, answer a live audio call with text-to-speech scammer dialogue, browse a fake social network complete with DM notifications, navigate a spoofed website designed to harvest your credentials, or watch your files encrypt in real time inside a ransomware file explorer.
4

Make Decisions Under Pressure

At every decision point, choose how to respond. The right call keeps you safe and earns you points. A wrong move triggers vivid consequence animations - your account gets compromised, files are encrypted, or personal data is harvested - showing exactly what happens to real victims, without any real damage.
5

Review, Learn, and Level Up

After each scenario, study a detailed breakdown of your performance: red flags you spotted, ones you missed, and the real-world impact of each decision. Earn collectible badges (28 across 4 categories), climb the difficulty ladder from beginner to expert, and track your journey toward full cybersecurity mastery.

Training Modes

Four Ways to Sharpen Your Defences

Free

Training Scenarios

70 hand-crafted scenarios across 8 threat types with multi-step branching paths and realistic false positives. Interact with simulated email inboxes, iMessage-style SMS threads, live audio phone calls, social media feeds, spoofed websites, ransomware file explorers, physical security situations like tailgating and shoulder surfing, and IoT attacks including hacked cameras and smart lock overrides.

Free

Courses and Quizzes

Structured learning modules that break down essential topics - password hygiene, social engineering red flags, safe browsing habits, and more. Each course ends with a quiz to cement your knowledge, and completing them unlocks exclusive badges to showcase your expertise.

Pro

Endless AI Scenarios

Never see the same attack twice. Pick your preferred threat type and difficulty, and our AI generates a completely unique scenario on demand. Up to 30 AI-generated scenarios per day with a Pro subscription at just £3.49/month - perfect for keeping your skills razor-sharp.

Pro

SOC Analyst Challenges

Step into the shoes of a Security Operations Centre analyst. Six interactive challenges put you on the front line: block malicious IPs, triage suspicious emails, defend against DDoS attacks, analyse honeypot data, audit compromised passwords, and lead a full incident response.

Surprise Training

Random Scam Popups

Real scams strike when you least expect them - and so does Cyber Scam Simulator. With notifications enabled, the app will ambush you with realistic scam popups while you are training. Across 12 distinct popup types, you will encounter fake virus alerts, prize sweepstakes, tech support warnings, urgent account lockouts, delivery scams, and more - each one modelled on attacks that catch thousands of real people every day.

Every popup follows a three-phase interaction: the scam appears without warning, you decide whether to dismiss it or engage, and then a clear explanation breaks down the red flags you should have spotted. It is reflexes training for the real world - building the muscle memory to pause, think, and close before you click.

Pro Tips

Six Rules That Stop Real-World Scams

The instincts you build in Cyber Scam Simulator transfer directly to your everyday life. Memorise these six rules and you will catch the vast majority of attacks before they land:

Inspect the Sender

Always check the full email address, not the display name. Attackers use addresses like [email protected] that pass a quick glance but crumble under a second look.

Resist Artificial Urgency

"Your account will be suspended in 24 hours" or "Act now or lose access" are pressure tactics designed to bypass your critical thinking. Legitimate organisations give you time - scammers never do.

Preview Every Link

Before clicking, hover (or long-press on mobile) to reveal the real URL. If your "bank" links to secure-login-verify.info instead of its official domain, close the message immediately.

Verify Through a Separate Channel

Received an urgent message from your "boss" or "bank"? Call them directly on a number you already trust - never use the contact details provided in the suspicious message itself.

Never Share Credentials

No legitimate company will ever ask for your password, PIN, or full bank details over email, text, or phone. If someone requests them, end the conversation - it is always a scam.

If It Seems Too Good, It Is

Lottery wins you never entered, surprise refunds, exclusive investment opportunities with guaranteed returns - these are bait. If an offer sounds too good to be true, treat it as a confirmed threat.

How to Play