SimuPhish Cyber Awareness Month 2026 is here. Explore The ShiPhu Files.
Detective ShiPhu with a magnifying glass at a case desk of AI scam files.
The ShiPhu Files — AI Scam Investigation Kit

When everything looks real, verification is your superpower.

AI is making scams more convincing. Explore five practical tools from Detective ShiPhu to help you spot the warning signs, follow safe habits and stay one step ahead.

Explore the 5 Tool Kits
  • Real knowledge.
    Safer people.
  • Stronger
    organisations.
  • A more resilient
    tomorrow.

Explore the 5 Investigation Tool Kits

Simple guidance. Real scenarios. Practical checklists.

Detective ShiPhu holding a tablet that frames a face in a verification scan.

The Deepfake Decoder

Seeing isn’t verifying

A familiar face appears on your screen. The voice sounds right. The conversation feels normal. But can you be certain the person on the other side is really who you think they are? AI-generated and manipulated video can make impersonation increasingly convincing. The Deepfake Decoder helps you look beyond appearances and focus on what really matters: the request, the context and independent verification.

The CEO Who Wasn’t There

It’s 10:35 AM. You receive a video call from a senior executive. You recognise the face. The voice sounds familiar. They know about today’s management meeting.

Then comes the request:

“I need you to process something urgently. Keep this confidential for now.”
A polaroid of an executive on a video call, stamped Case #001.

Look Beyond The Face. Ask The Right Questions.

  • Is The Request Unusual?

    Would this person normally ask you to transfer money, share sensitive information, or take an action outside their usual process?

  • Is There Urgency?

    “Do it immediately.” “I need this in five minutes.” “Don’t wait for approval.” These are common red flags.

  • Are You Being Asked To Bypass A Process?

    Requests to skip approval workflows or security procedures should always raise concerns.

  • Is Secrecy Involved?

    “Keep this between us.” “Don’t mention it to anyone.” These are tactics used to avoid verification.

  • What’s At Stake?

    Be extra cautious when money, credentials, confidential information or system access are involved.

The Big Reveal

A Familiar Face, Voice And Context Can Create A Strong Sense Of Trust.

But Even Convincing Moments Can Be Fake. Be Aware. Be Independent. Verifying Is Safety.

  • Face looks real

    Appears genuine
  • Voice sounds real

    Appears genuine
  • Content makes sense

    Appears genuine
  • Identity verified?

    Not verified

That’s The Difference.

Looks Real Is Not Enough. Verification Is What Protects You.

Deepfake Decoder In 60 Seconds

  • The Risk

    AI can create a realistic version of anyone voice, face, video and more.

  • The Trap

    It feels familiar, looks real and often comes with urgency or secrecy.

  • The Signals

    Watch for unusual requests, pressure to act quickly and attempts to bypass normal processes.

  • The Response

    Pause. Verify independently. Follow your security process.

  • The Rule

    Trust the process, not just what meets your eyes and ears.

You don’t have to spot every fake.You just need to know when to verify.

– ShiPhu
Small habits make a big difference. Human judgement matters.

More Resources

Download, share and spread the word.

  • All Safety Checklists

  • Short Awareness Documents

Detective ShiPhu looking out over a city skyline at night.

Build a more human-resilient organisation.

SimuPhish Human Risk Management+ helps organisations measure and reduce human risk through real-world scenarios across multiple communication channels.

Request Demo
Meet ShiPhu, the SimuPhish mascot