Skip to main content
A call-back trap does not phone anyone. Each person gets a short text or email with a phone number in it. The number is one of ours, assigned to this campaign. Anyone who calls it reaches the AI, which answers as the sender and tries to obtain what you set as the objective. Calling is a failure; giving information is a worse one.
Callers who are not on your list hear “Sorry, I think you have the wrong number.” Nothing about them is kept.

​
Before you start

  • An attacker with a voice. Its voice and language model are what the AI answers with. See Create an attacker.
  • The people to message, with a phone number or an email address on their contact. See Add the people you will call.
  • One or two sentences saying what the AI should try to obtain.
  • Agreement that messages to staff phones and inboxes are in scope. You tick this at launch.

​
Steps

1

Choose Call-back trap

Open Red Team, Campaigns, New Campaign. Pick Single call, then under Single call type: pick Call-back trap. A box titled How a call-back trap works appears.
2

Who calls and who is called

Pick an attacker, then tick the people to message. These are the same steps as a standard campaign. See Build a campaign.
3

Fill in the Call-back trap step

The wizard adds a step headed Call-back trap. Fill in four blocks.Under Email, people without an email address are left out. Under Text and email, each person gets whichever they have, both when they have both.
4

From where and when

Messages go out inside the call window you set here. See Schedule, pacing and retries.
5

Authorise and launch

Record the authorisation as usual, and tick Messages to staff phones and inboxes are in scope for this engagement. Click Launch. See Authorise and launch.

​
What happens next

The trap number is assigned when the campaign is saved and released when it finishes. Nobody else uses it meanwhile. Each person gets the message inside the call window. Anyone who calls the number reaches the AI, which greets them with the template’s opening, for example “Accounts team, good afternoon. Can I take your name and the company you are calling from?” The call is then scored and coached like any other. The results page shows one row per person: the message sent, whether and when they called, what they gave, and our detector’s verdict on the caller. See Help desk and call-back results.

​
Problems

The trap number is filled in where {number} sits. Put it back in the message.
The message may name the person and their own company only. Remove the brand name.
They have no address on the chosen channel, they opted out of messages, or the daily cap of 500 notices was reached. The row shows the reason.
Give it time. The campaign waits the hours you set after the last message. The results page says “Typical time from message to call” once people start calling.