A Quick Phishing Test from Google

Most FOI and privacy professionals are aware of phishing risks. We routinely advise staff to be cautious and we respond when something goes wrong.

In turn, staff look to us for guidance on what to watch for. Setting that example means being able to recognize the warning signs ourselves — especially as phishing attempts become more realistic and harder to spot.

That’s why I highly recommend taking a few minutes to try Google’s Phishing Quiz.

It’s short, well-designed, and more challenging than you might expect.

Why this matters now

Phishing attacks are improving. They are no longer obvious or sloppy. New tools like AI are helping to make them more convincing, more personalized, and harder to spot at a glance.

The examples in the quiz look like messages staff encounter during their normal workday — shared documents, account notices, or requests that seem routine and time-sensitive. You may be surprised at just how sophisticated a modern phishing attempt can be, which helps to explain why these attacks continue to succeed even when people know to look out for them.

Security requires everyone’s attention

Preventing security and privacy breaches involves both setting up strong internal systems and controls (such as choosing modern, cloud-based software solutions with built-in security) and making good decisions in the moment to stop attacks before they succeed. That second part depends heavily on staff awareness and judgment.

Education around phishing is key. Even the best systems can be compromised if credentials are handed over or malicious links are clicked.

A simple, practical step

This quiz is a good reminder that no one is immune and that staying sharp matters, especially for those of us responsible for guiding others in this area.

I’d encourage FOI and privacy professionals to take the quiz themselves and consider sharing it internally as a training and awareness exercise. It’s a worthwhile investment that reinforces good habits and helps ensure we’re modelling the caution we expect from our colleagues.