Phishing Email Templates

CanIPhish maintains an ever-evolving library of free phishing email templates that update with the latest trends. Take a look at our library and see the emails for yourself!

Gray dot header

How phishing emails trick victims

Phishing emails typically have a common set of goals that can be used to identify what type of attack is taking place. These goals usually involve credential harvesting, endpoint compromise, or business email compromise (i.e., reply-to attacks). Armed with an understanding of what an attacker's goal is, you can identify the techniques an attacker will likely use to trick its victim into interacting with the phish.

For credential harvesting, an attacker will craft a phishing email that contains links or buttons that lead to a malicious website. For endpoint compromise, an attacker will craft a phishing email that contains a malicious attachment, enticing the victim into downloading and opening it. For business email compromise or reply-to attacks, an attacker will craft a phishing email that attempts to have the victim respond to them. Ultimately, all phishing emails have a malicious goal and intention behind them.

Equipped with this information, take a look at our fake email templates and see if you can spot the goals behind them! Looking for a phishing email generator? Create a free account or try our email inbox simulator to see the unique ways we create phishing emails.

British Airways Travel Voucher Email

Email from British Airways advising a voucher has been issued due to a previous flight change

Transport for London Lost Item Email

Email from TfL advising that a bag has been found that contains cash and other belongings

Air New Zealand Password Reset Email

Email from Air New Zealand for a password reset

BNZ Profile Update Email

Email from BNZ asking the user to review the changes to their account.

CEO Payment Authorization Form Email

This BEC phishing email is designed to impersonate the CEO and asks the user to process the payment by the end of the day.

Urgent Software Update Email

An email that pretends to be from the company’s IT help desk, advising the employee to perform an urgent sofware update.

Password Change Email

Tech support advising a password change is required due to a recent security breach

Innapropriate Email Attachment Email

A message from HR asking the employee to review an email attachment

Microsoft 365 Quarantine Email

Notification from Microsoft that an email is held in quarantine for review

Teams Task Assignment Email

Notification from Microsoft Teams that a task has been assigned

Confluence Calendar Event Email

Confluence calendar notification of an upcoming copmany event

ADP Direct Deposit Email

Alert from ADP advising of a direct deposit change

Monday Policy Violation Email

Notification of inclusion in a policy violation register

Linkt Password Update Email

Password reset required notification from Linkt

GoDaddy Security Breach Email

GoDaddy notification requesting a domain be validated

Square Gift Card Email

Gift card delivery notification from Square

Zoho Group Invite Email

Zoho group invitation email

Quickbooks Delete User Email

New user warning notification from QuickBooks

ZipRecruiter Job Offer Email

Fake job offer that originates from an automated job pairing system

Mailchimp Policy Violation Email

Mailchimp policy breach notification prompting user action

Shopify Unknown Bill Email

Bill from Shopify enticing the recipient to view or dispute it

Apple Tax Invoice Email

Apple invoice with a link to a fake login page

Vanta Outstanding Task Email

Automated onboarding email notifying the user they have incomplete tasks

BambooHR Benefits Notification Email

Automated email from Bamboo HR advising the user that their company benefits are active

Venmo Payment Notification Email

Notification advising the user that they have received a Venmo payment

Request For Quote Email

Fake quote request from an obscure organization

Wire Transfer Confirmation Email

Wire transfer notification prompting user to fill in an attached document

QR Code Enter to Win Email

Email asking employees to review a policy using a QR code as the method of interaction.

QR Code Office 365 Email

Office 365 themed email utilizing a QR code attack.

QR Code Google Workspace Email

Email prompting an employee to use a QR code to verify themselves.

HR Device Violation Email

Email from HR advising the employee has breached the device policy

Pento Password Expiry Email

Password expiry email leading to Pento login phishing site

Jenkins Unauthorized Access Attempt Email

Jenkins Security Breach Detected

Udemy Credits Email

Udemy email sending users free credits

Bank of America Suspicious Activity Email

Bank of America advising unusual activity with a link to login

Adobe Security Details Changed Email

Adobe email alerting user security details have changed

Tik Tok New Device Email

New Device Login Attempt

Teams Message Email

Missed Teams message that leads to credential harvesting

Sharepoint Access Request Email

Credential harvest attack using SharePoint request access function

Google Drive Shared File Email

Google-Drive-Shared-File

Zendesk Offline Chat Email

Zendesk offline chat message

Zendesk Password Reset Email

Zendesk Password Reset Request

Trello Workspace Invitation Email

Trello workspace invitation.

Stripe Password Update Email

Stripe password updated.

Dashlane New Device Email

Dashlane new device authentication code.

Bitwarden New Device Email

Bitwarden new device login notification.

1Password Password Change Email

Password change request for 1Password.

Conference Attendance Reply To Email

Using a fake email chain to trick employees.

Business Opportunity Reply To Email

Promises a lucrative business opportunity.

Lyft Company Rides Email

Free company rides.

Xero Password Expiry Email

Xero password is expiring soon.

Xero Profit Loss Statement Email

Quarterly company profit and loss statement

CRA Payment Form Email

Download your CRA payment form

Google Meeting Invite Email

Google Meeting Invitation

ADCB Unread Message Email

ADCB Unread Message Notification.

STC Service Suspended Email

STC Account Suspension Notification

AMEX Card Confirmation Email

American Express new card request

Slack Password Reset Email

Slack password reset request

Office365 Password Reset Email

Password reset code for an Office365 account.

African Bank Unread Message Email

African Bank Unread Message Notification.

GitHub OAuth App Email

An OAuth App has been added to your account

Spam Filter Quarantine Email

Emails quarantined pending release

Deliveroo New Address Email

New address registered on Deliveroo account

Uber New Device Email

New device sign-in for Uber account

Zoom Invite Email

Zoom group invitation

Starbucks App Email

Starbucks app notification

Salesforce Reset Password Email

Salesforce password expiration notification

Netflix Reset Password Email

Netflix password expiration notification

DocuSign Sign Document Email

DocuSign expense declaration signature

Canada Post Parcel Email

Canada Post delivery failure

Amazon Black Friday Email

Amazon Black Friday Promotion Notification

Verizon Service Suspended Email

Verizon Account Suspension Notification

FedEx Shipment Tracking Email

FedEx Shipment Tracking Notification

CapitalOne Card Confirmation Email

CapitalOne Card Request Confirmation

AusPost Shipping Confirmation Email

AusPost delivery failed

Concur Expense Report Email

Expense report approved

Ebay Item Purchase Email

Ebay item purchase via Paypal

COVID19 Work Survey Email

COVID19 return to work survey attachment

Job Opportunity Email

Sales job opportunity attachment

AFP Subpoena Email

AFP Subpoena with attachment notification

Office Holiday Party Email

Google Drive file share for office party

Women Equality Day Email

Google is celebrating Women's Equality Day

Update Your Badge Email

Health employees need an updated ID badge

Booking Vacation Agreement Email

HR sponsored vacation booking

Concur WFH Payment Email

Concur payment for WFH setup

JIRA Notification Email

Jira new task notification.

Groupon Deals Email

Groupon Deals Notification.

Govia Tax Invoice Email

Go via Tax Invoice Download.

CommBank Unread Message Email

CommBank Unread Message Notification.

Linkedin Password Reset Email

LinkedIn Password Reset Request.

OneDrive Word Share Email

OneDrive Word File Share.
Curious about what you can do with our simulated phishing emails?

Phishing Email Features & Capabilities

1. Create, generate, or modify phishing email templates to suit your needs

Our simulated phishing platform is highly configurable, and using our HTML email editor, you can create, generate, duplicate, or modify existing phishing emails based on organizational requirements. In addition, the HTML editor gives you complete control over email content and design.

A common use case is that your organization may use bespoke software, interact with niche vendors, or have strict compliance requirements where you need to simulate specific content.

2. Choose from 74 different languages for each phishing email template

The CanIPhish team has invested significant resources in ensuring each phishing email in our library is multi-lingual in 74 different languages. This multi-lingual capability is coupled with our phishing websites and training modules, which are also available in 74 languages.

Multi-lingual phishing is particularly important for organizations with non-English speakers or a global employee base.

3. Dynamically insert personalized information to conduct spear-phishing

Inserting content at the time of email delivery is absolutely crucial to ensuring phishing emails are as realistic as possible. In support of this, the CanIPhish Cloud Platform allows for the dynamic insertion of content such as employee first names, last names, job titles, company names, and more.

4. Track and report against all forms of phishing email interactions

Delivering a phishing email is the first phase of running a successful phishing simulation exercise. The next phase is ensuring interactions are properly tracked and reported. This can include tracking who clicked on phishing links, who opened attachments, and who responded to phishing emails.

The CanIPhish Cloud Platform supports tracking and reporting against all three types of phishing interactions.

5. Benefit from emails themed after global and regional services

CanIPhish supports a variety of organizations across the globe, and while many organizations utilize global services, many also utilize localized services. These services include local banks, service providers, utility companies, etc. To ensure CanIPhish offers a diverse range of phishing templates, we selectively onboard and simulate these services at customer request.