Test formats
The four formats
Section titled “The four formats”| Format | What the staff member gets |
|---|---|
| Email link | A link inside the email |
| Email QR code | A QR code in the email to scan |
| PDF with link | An attached PDF with a link inside |
| PDF with QR code | An attached PDF with a QR code to scan |
All four lead to the same fake sign-in page. QR codes have no link to click, so staff usually scan them with their phone, and the page opens there.
PDF and QR code tests are built around a business document, such as an invoice or a delivery notice. The email asks the person to open the attachment or scan the code. See Choose PDF designs below.
Set the mix
Section titled “Set the mix”- Click Campaigns in the menu.
- Click Advanced, then Test formats.
- Drag the dividers on the coloured bar, or use the − and + buttons next to each format. The total always stays at 100%. When you change one format, the others adjust to match.
- To stop using a format, set it to 0%.
- Click Save changes at the bottom of the page.
The mix is used for scheduled tests and for one-off tests sent with Automatic mix. The percentages are chances, not exact counts, so they even out over many tests.
New accounts start with:
- Email link: 40%
- Email QR code: 20%
- PDF with link: 20%
- PDF with QR code: 20%
To go back to these, click Restore default percentages. This also resets the percentages under Advanced generation settings.
Choose PDF designs
Section titled “Choose PDF designs”The PDF library (under Advanced) lists the document designs used for PDF and email QR code tests:
- Client document bundle
- Supplier invoice
- Request for quotation
- Signature request
- Employee benefits
- Voicemail notification
- Delivery collection notice
- Event registration
- Account security renewal
- Compliance review
All are selected by default. To change this, tick or untick designs, or use Select all or Clear selection, then click Save changes.
Your selected designs take turns. When you’ve selected more than one, nobody gets the same design twice in a row. If Email QR code or either PDF format is above 0%, you need at least one design selected.
Each document comes from a made-up business and has its own reference number and dates. Depending on the person’s difficulty level, it can also include their first name and your organisation’s name.
Preview a PDF design
Section titled “Preview a PDF design”- In the PDF library, click Preview under a design.
- Switch between Link version and QR version.
- To see the full PDF with your organisation’s details, click Open full PDF.
Previews don’t record any activity.
Choose who writes the email
Section titled “Choose who writes the email”Advanced generation settings (under Advanced) has three separate settings. They don’t need to add up to 100%.
- Who writes the email? sets how often emails are AI-written or come from a Template. New accounts start at 50% AI-written. This applies to all four formats. For PDF and QR code tests, a template email is a short, plain note from the document’s sender.
- Who chooses the story? applies only to AI-written email-link tests. With Preset scenario, OutPhish gives the AI a common phishing story to write, such as a shared document, password reset, invoice or parcel delivery. With AI chooses, the AI picks a story to suit the person and your organisation. New accounts start at 10% preset.
- Which theme is used? applies only to template email-link tests. It sets how often a Seasonal template is used instead of a Year-round one, when a seasonal template is available for the current month. New accounts start at 70% seasonal.
If a template email can’t be made, OutPhish uses an AI-written email instead.
To see how these settings combine, open How your campaign branches under Advanced. It updates as you make changes.
Remember to click Save changes.