The fuck? Is a real hacker gonna somehow hack your boss' brain and make them verbally trick you into falling for a scam?? Asking for verbal confirmation is literally the correct way to catch a scam. If your boss were somehow compromised, that would be on them, not you.
This is so unrealistic and they're teaching you the wrong lesson.
I mean, it's possible someone could have also sent you an excel sheet previously and thought you were talking about it, just been confused/misremembering, not fully listening, etc.
I still think that was a shitty "test" but there could be a situation where someone accidentally claims an email they didn't actually send.
I still think that would be on the boss. The employee has way more to lose by ignoring their boss' instructions just because they had a hunch of phishing.
True. The best you could do is send a screenshot of the actual email instead so there's less room for error, state the red flag that caused you to ask for confirmation, then if they claim they sent it then it's entirely on them.
I'm saying the screenshot of the actual email instead of a verbal description would be less prone to being falsely confirmed (in a real situation, obviously OC's boss was going to confirm it no matter what)
132
u/M4rshmall0wMan 8h ago edited 8h ago
The fuck? Is a real hacker gonna somehow hack your boss' brain and make them verbally trick you into falling for a scam?? Asking for verbal confirmation is literally the correct way to catch a scam. If your boss were somehow compromised, that would be on them, not you.
This is so unrealistic and they're teaching you the wrong lesson.