Skip to main content
Every workspace has one public page where staff report a suspicious call. No login is needed. When the call was one of your tests, the person’s result becomes Reported, the best outcome. When it was not, your security contact gets an email about a possible real attack.
You need the Member role or above to see the link. Anyone with the link can use the report page.

​
Before you start

  • Somewhere to publish the link to staff: your intranet, a poster, or the awareness email you send before a programme.
  • The email address of the person who should hear about possible real attacks.

​
Steps

1

Open Fair testing

In the console, open Red Team, then the settings page titled Fair testing. Its address is /red-team/settings. Scroll to Report a suspicious call.
2

Copy and share the link

The link is shown in the box. Click Copy. Share it with staff in whatever way they will find it when they need it. The address ends in a long random token, so it cannot be guessed.
3

Set the security contact

Under Security contact email, enter the address that should receive alerts about possible real attacks. Leave it empty and the alert goes to the workspace owner. Click Save settings.
4

Rotate the link when you need to

Click New link to make a new one. A window asks you to confirm, because the old link stops working straight away. Share the new link with staff.

​
What staff see

The page is titled Report a suspicious call. It says: “Got a call that felt wrong? Tell us. It takes a minute and it helps everyone.” The button is Send report. Under it: “You will not be judged for reporting. Reporting a call is always the right call.”

​
What happens next

DeepBlocker looks for one of your test calls within 30 minutes of the time given. A call matches when its caller number is the number reported, or when its dialled number is the person’s own number. Only campaigns active around that time are checked. Reports older than 30 days cannot be matched. Nothing about who was called ever goes back to the browser. The page only learns “matched” or “not matched”.
The best-prepared teams add the link to the warm-up notice or the awareness email, so the way to report is in the person’s hand before the call comes.

​
Problems

The link was rotated, or it was copied with a character missing. Copy it again from Fair testing and share the new one.
The page limits how many reports one network can send in a few minutes. Wait a few minutes and try again.
The time given was more than 30 minutes from the call, or the number did not match. Ask the person to report again with their own number filled in, which lets the match use the dialled number.
Check Security contact email on Fair testing. When it is empty, the alert goes to the workspace owner’s address.