ScamDrill

Overview

ScamDrill is a scam-recognition training service for households and employee teams. It suits families who want practice across email and text, and organizations looking for adaptive exercises with progress tracking. Its strongest distinction is that it pairs simulations with follow-up learning and, on Family, AI checks of suspicious messages; the trade-off is that meaningful organization use carries substantial annual plan costs.

Key features

Family exercises cover email and SMS, while organization simulations add QR-code scams. Exercises adapt to each learner’s results and become more difficult as skills improve, making this a better fit than a fixed sequence for groups with differing experience. A dashboard tracks progress, scam types caught, and areas that need practice, giving administrators a way to see where further training may help.

Families can forward suspicious emails or texts for AI analysis; message checking is included with Family and sold as a $2.99 a month add-on for Free users. Organization rosters can sync with Okta, Azure AD, and Google Workspace. Enterprise adds a REST API and webhooks. The product also includes phishing simulations, interactive awareness content, automated campaigns, and risk scoring, though the listed plan details do not assign every one of those capabilities to a particular tier.

ScamDrill says data is encrypted in transit and at rest, uses database-level tenant isolation, and supports passkey-based two-factor authentication. Its security FAQ says simulated landing pages do not capture, transmit, or store what learners type. The company says it does not sell personal data or share learner data with advertisers or data brokers. SOC 2 is planned; paid organization plans include audit report exports for frameworks including SOC 2, ISO 27001, and HIPAA. Those exports may help with audit preparation, but planned SOC 2 should not be mistaken for current certification.

Pricing

The Free plan costs nothing and includes one email drill per month, one learner, beginner difficulty, a progress dashboard, and real-time alerts. It is a useful low-commitment introduction, but one monthly drill and one learner sharply limit it as ongoing household or team training.

The AI Analysis add-on costs $2.99 a month on Free. Family costs $5.25 a year, billed annually at $63 and renewing at the standard $84/yr. It supports four learners and adds email and SMS drills, the full scam library, iPhone and Android apps, AI message checking, and priority support. For a household, this is the clearest fit; its renewal price is higher than the stated first-year annual billing.

Organization plans use annual pricing. Starter is $336.75 a year for 2–25 seats, with email simulations, Autopilot, adaptive training, compliance reports, and helpdesk support; it renews at the standard rate after year one ($449 shown). Team is $1,124.25 a year for up to 100 seats, adds additional seats in blocks of 100, and renews at the standard rate after year one ($1,499 shown). Both fit teams seeking core simulations and reporting, but Starter's 25-seat ceiling and Team's block-based expansion matter as headcount grows.

Business is $4,499.25 a year for up to 500 seats, with Team features plus AI scam detection, campaign scheduling, and departments; SSO/SCIM is a $2,500/yr add-on. It renews at the standard rate after year one ($5,999 shown). Enterprise is $14,999.25 a year for up to 2,500 seats, adds white-label branding, an LMS API, and priority support, and also charges $2,500/yr for the SSO/SCIM add-on; it renews at the standard rate after year one ($19,999 shown). These tiers suit larger organizations that need the specified scale or capabilities, but the renewal step and add-on cost should be part of the budget decision. A free trial is available.

Platforms

ScamDrill is available on Android, iOS, web, and API. Family includes iPhone and Android apps; Enterprise lists an LMS API, while organization roster sync supports Okta, Azure AD, and Google Workspace.

Who it's for

Choose ScamDrill for a household training teenagers and older adults together, especially if AI message checking and four learner seats matter. For organizations, it is most compelling when adaptive simulations, roster syncing, reporting, or the larger-tier features match a defined training program. It is less suitable for an individual seeking frequent practice on a free plan, or a small organization unwilling to commit to the annual organization tiers.

Pros and cons

• Pros: Adaptive difficulty and a progress dashboard make training more responsive and show which scam types need attention.
• Pros: Family combines four learners, email and SMS drills, and AI message checking, covering household use more broadly than the Free cap.
• Pros: Organization roster sync and paid-plan audit exports can support administration and compliance workflows.
• Cons: Free is restricted to one learner, one monthly email drill, and beginner difficulty, so it offers limited continuing practice.
• Cons: Organization pricing rises considerably across tiers, with stated post-year-one renewal rates and a separate SSO/SCIM fee on Business and Enterprise.
• Cons: SOC 2 is planned rather than an achieved status, which may not satisfy organizations requiring current certification.

Alternatives

For another freemium option, Wizer offers free basic annual security awareness training, basic user management, limited reporting, and automatic learner reminders; choose it when those basics are the priority. Brightside AI has free courses and a vishing option priced from €1/ m. per seat, making it worth considering when voice-focused simulation is the deciding factor. CyberHoot offers a $125 a month Autopilot plan with white-label functionality, multi-tenancy, automated training, interactive phishing training, and videos; consider it when those capabilities are central.

Proofpoint Email DLP and Encryption, Boxphish, Mimecast Data Leak Prevention, OpenText Core Email Message Privacy, and Hoxhunt are other options to compare. Browse the Cybersecurity Training Platforms list for more choices.

Verdict

ScamDrill is a strong fit for families who want shared, adaptive scam practice and AI message checking, and for organizations whose training needs justify its paid tiers. Its adaptive exercises, progress view, and family coverage are persuasive reasons to choose it. Look elsewhere if you need sustained free training, a lower-cost organization plan, or current SOC 2 certification.