Baited
Catch fake emails, texts, URLs
Only for iPhone
Free · Designed for iPhone. Not verified for macOS.
iPhone
Your inbox is a fishing pond. 264 real-world scams and legit messages, ten at a time — swipe left for phishing, right for legit, and learn the tell you missed.
Every phishing message you've ever fallen for looked completely normal. Baited trains the part of your brain that notices before you click.
A message appears — an email, a text, a login page, a bare URL. Swipe left if it's phishing, right if it's legit. You have 60 seconds for ten cards. Miss one and you'll see exactly what gave it away.
HOW IT WORKS
• Swipe left for phishing, right for legit — or tap the buttons
• Every answer shows 2-3 specific tells: the lookalike domain, the reply-to mismatch, the pressure tactic
• Build streaks for score multipliers, and a speed bonus for trusting your gut
• Share your result as an emoji grid when you're done
25 ROUNDS THAT GET HARDER
The campaign runs from obvious bait to genuinely difficult, and it remembers where you stopped. Early rounds are misspelled bank pages and prize-giveaway texts. Later rounds are punycode domains, reply-chain hijacks, and phishing hosted on real Google and Microsoft infrastructure.
WHAT'S IN THE DECK
264 cards drawn from real-world attack patterns: credential harvesting, invoice fraud, gift card scams, delivery notices, tech support callbacks, crypto drainers, CEO fraud, MFA fatigue, romance scams, and AI-era attacks like deepfake wire fraud and voice cloning.
THE LEGIT ONES ARE THE HARD PART
Half the deck is real. Genuine order confirmations, actual bank alerts, authentic security notices — including the ones that look wrong but aren't. Learning what to trust matters as much as learning what to avoid.
FIND YOUR BLIND SPOT
Per-category accuracy shows where the bait keeps working on you. Most people discover they're excellent at spotting fake prizes and terrible at invoice fraud.
Built by a security professional. Every tell is technically accurate — real short codes, real domain structures, real attacker tradecraft. No filler, no "looks suspicious."
No ads. No account. No tracking. Nothing leaves your phone.
Ratings & Reviews
- This app has not received enough ratings or reviews to display an overview.
The developer, ubicomp, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Size
- 1.1 MB
- Category
- Education
- Compatibility
Requires iOS 17.0 or later.
- iPhone
Requires iOS 17.0 or later. - Mac
Requires macOS 14.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
- English
- Age Rating
4+
- 4+
- Provider
muhammed bulut
- muhammed bulut has not identified itself as a trader for this app. If you are a consumer in the European Economic Area, consumer rights do not apply to agreements between you and the provider.
- Copyright
- © 2026 Zuzu Lab
