Phishing Email Scorecard

Rating A Phishing Email

The following scorecard is designed to assist in assessing how advanced a phishing email is.  

For each of the ten attributes below, check the box if that attribute is compelling (makes you want to act) or convincing (increases your trust).  The higher the score, the more advanced the phishing email.  Scores are interpreted into ratings below.

Is the scenario (pretext) convincing and / or compelling?
Are the time and date of the email convincing and / or compelling?
Is the sender name convincing and / or compelling?
Is the FROM sender's email address convincing and / or compelling?
Is the recipient email address convincing and / or compelling?
Is the subject line convincing and / or compelling?
Is the use of personal information (or absence thereof) convincing and / or compelling?
Is the grammar and tone convincing and / or compelling?
Is the formatting of content convincing and / or compelling?
Are the domains used convincing and / or compelling?
Is the use of images (or absence of images) convincing and / or compelling?
Is the use of links (or absence thereof) convincing and / or compelling?
Is the use of attachments (or absence thereof) convincing and / or compelling?

Total:

Scorecard Ratings

Rating Score
Less Advanced 0 to 6
Somewhat Advanced 7 to 12
More Advanced 13+