EXAMPLE - made up
Security awareness training for modern teams
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and social-engineering training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the threats hitting teams everywhere right now: AI voice and deepfake CEO fraud, credential phishing, and the scams that slip past a single annual training session.
Security awareness training, built for Nigeria
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the fraud patterns Nigerian teams see every day: BVN and OTP requests, POS and mobile money scams, SIM-swap, and a WhatsApp message pretending to be the MD.
Security awareness training, built for Ghana
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the fraud patterns Ghanaian teams see every day: MoMo reversal scams, fake Ghana Card texts, and the mobile money agent fraud hitting offices and merchants alike.
Security awareness training, built for Kenya
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the fraud patterns Kenyan teams see every day: M-Pesa "wrong number" refund scams, fake KRA messages, and SIM-swap attempts on mobile money accounts.
Security awareness training, built for South Africa
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the fraud patterns South African finance teams see every day: SARS eFiling phishing, invoice and business-email fraud, and POPIA-aware data handling.
Security awareness training, built for Africa
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We started with the fraud patterns Nigerian teams see every day and have gone deep in Ghana, Kenya, and South Africa, with mobile money fraud and SIM-swap scams covered across the continent.
Security awareness training, built for European teams
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the patterns European finance and HR teams see every day: invoice fraud, credential phishing, and GDPR-aware staff training.
Security awareness training, built for Canadian teams
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the patterns Canadian finance teams see every day: invoice fraud, business email compromise, and privacy-law-aware staff training.
Security awareness training, built for US teams
Training your staff will actually remember, not just click through.
Cyberwareness turns phishing, fraud, and data-protection training into short, specific lessons staff finish in minutes, backed by real phishing simulations. We cover the patterns US finance and admin teams see every day: business email compromise and wire fraud, with FTC Safeguards Rule training built in for tax and CPA firms.
17training tracks
178micro-lessons
3-7 minper lesson
Free, no sign-up to try
Start free: check an email, then test your team
Paste a suspicious email into the free phishing checker and get a verdict with the red flags. Then run a free phishing test for up to 25 of your staff and see who would click.
New this week
This week's attack:
Made-up example. Nothing here is real. We only count plays anonymously.
What you get
Pick a part of Cyberwareness and see how it works
Six things, each shown in a small picture, then in plain words.
Safe phishing tests that teach on the spot
In plain words
We send your team a fake phishing email. It is safe: made-up brands and no real bad link. If someone clicks, they see right away what they missed. If someone reports it, that counts as a win.
- Fictional brands and domains, never a live malicious link
- A short lesson the second someone clicks or replies
- Sent, opened, clicked, submitted and reported rates, by department
- Anyone who clicks or submits is re-tested about 30 days later
Short lessons staff finish in minutes
In plain words
Video lessons of 3-7 minutes, tracked on Skillermatic. Everyone starts with All-Staff Core. Managers, finance, IT and others add the track that fits their job.
- 17 tracks and 178 micro-lessons of 3-7 minutes
- All-Staff Core: 25 lessons, about 100 minutes, done in the first 30 days
- Add-on tracks for managers, finance, IT, remote teams, healthcare and financial services
- Local scams too: BVN and OTP requests, SIM-swap, POS fraud, mobile money, SARS phishing
A certificate staff can show, and you can check
In plain words
Finish the course and pass the final exam, and the staff member gets a certificate with a QR code. Anyone can scan it to check it is real.
- A certificate for every course
- A QR code and a public page to verify each one
- Final exam: 25 questions, 80% to pass, up to 3 attempts
- Valid for 12 months, so the refresher is built in
Proof you can hand to a manager or an auditor
In plain words
A plain-language report shows who clicked, who reported, and who still needs the lesson. It comes as an executive PDF and a monthly summary email.
- Executive PDF report and a monthly summary email
- Every run compared with the runs before it
- Rates broken out by department, without shaming one person in team-wide reports
- Lessons mapped to NDPA, CBN, GDPR, ISO 27001, PCI DSS, HIPAA and FTC Safeguards. Check exact clauses with your own advisor.
A little every month, not one long session a year
In plain words
After the first 30 days, staff get 1-2 short lessons a month and a phishing simulation. It follows a 12-month plan, so nobody sees the same test twice in a year.
- A 12-month microlearning calendar you can follow
- Roughly 1-2 simulations a month, each one different
- A Threat Update track for what is hitting teams right now
- An annual refresher lesson to close the year
Try it before you buy
In plain words
Three free ways to see where you stand today. No long forms, and you can stop at any time.
- Free baseline phishing test for up to 25 of your staff
- Cyber risk quick check: 6 questions, a scored result
- Spot the fake: 6 made-up emails, about 2 minutes
- Free Phishing 101 mini-course
What we train your team to catch
The specific scams your team sees, not generic advice
AI voice & deepfake CEO fraud
A cloned executive voice or video asking for an urgent payment or access change, with no second-channel verification offered.
Credential phishing
Fake login pages that still work even after you complete MFA, built to steal the session, not just the password.
Business email compromise
A spoofed vendor or executive email asking for a bank-detail change or an urgent transfer.
BVN & OTP scams
A caller claiming to be bank staff, asking for a BVN, NIN, or one-time code to "verify" an account.
POS & mobile money fraud
A fake "wrong transfer, please refund" alert, or a POS terminal skimmed to copy card details.
WhatsApp "MD" impersonation
A message pretending to be a director or the MD, asking for an urgent transfer or gift-card purchase.
MoMo reversal scams
A fake "wrong transfer, please send it back" message designed to trick a mobile money agent or customer into refunding money that was never actually sent.
Fake Ghana Card texts
A text or call claiming your Ghana Card registration needs "urgent verification," asking for personal details or a code.
Government-contractor invoice fraud
A spoofed vendor email asking a contracting business to change bank details ahead of a payment.
M-Pesa "wrong number" refunds
A scammer sends a fake deposit alert, then asks you to "send it back" to a different number than the one that paid.
Fake KRA messages
A text or email pretending to be the Kenya Revenue Authority, demanding an urgent payment or login to "resolve" a tax issue.
SIM-swap on mobile money
An attacker hijacks your SIM to intercept the codes protecting your M-Pesa or bank account.
SARS eFiling phishing
A fake SARS email or SMS asking you to "log in" to claim a refund or fix an eFiling problem.
Invoice & business email fraud
A spoofed supplier email changing bank details right before a payment run.
POPIA-aware data handling
Everyday habits, like forwarding customer data to an unapproved tool, that create real compliance risk.
Mobile money agent fraud
Fake transfer alerts designed to get an agent to release cash before a payment actually lands.
SIM-swap fraud
An attacker hijacks a phone line to intercept the codes protecting a mobile money or bank account.
Fake loan apps & investment groups
Guaranteed-return investment schemes and predatory loan apps that harvest contacts and personal data.
Invoice fraud
A spoofed supplier email changing bank details right before a payment run.
GDPR-aware training
Everyday habits, like pasting customer data into an unapproved AI tool, that create real GDPR exposure.
Credential phishing
Fake login pages built to steal a session even after MFA is completed.
Invoice fraud
A spoofed supplier email changing bank details right before a payment run.
Business email compromise
A fake executive request to urgently wire funds or buy gift cards, sent from a lookalike domain.
Privacy-aware data handling
Everyday habits that create real exposure under Canadian privacy law.
Business email compromise & wire fraud
A fake executive or vendor request to urgently wire funds, sent from a lookalike domain.
FTC Safeguards Rule training
The written information-security-program training duty that applies to many tax preparers and other covered financial institutions.
Credential phishing
Fake login pages built to steal a session even after MFA is completed.
Where we work
Global coverage, with deep regional detail where it matters
Global
Teams in Europe, Canada, the US and beyond: phishing, payment fraud, account takeover and data protection, mapped to GDPR, ISO 27001 and PCI DSS.
See the Global hub →United States
CPA and tax firms facing the FTC Safeguards Rule, and dental and medical practices facing HIPAA training expectations.
CPA and tax firms → Dental and medical practices →Africa
A full Nigeria build-out today (NDPA, CBN, banks, fintechs, insurance, pensions, telcos), plus Ghana, Kenya, and South Africa.
See the Africa hub →Nigeria
Banks, PSBs, fintechs, PSPs, MFBs, insurance, and pension PFAs facing NDPA and CBN awareness-training expectations.
See the Nigeria hub →See it in 60 seconds
What your team actually sees
Try before you buy
Free tools that show you something real, right now
Free phishing risk test
Tell us a bit about your company and we'll run a real baseline phishing test against up to 25 of your staff.
Request the free test →Is this email phishing?
Paste a suspicious email and get a verdict with the specific red flags, in seconds.
Check an email →Cyber risk quick check
Six questions, a scored result, and the option to get a detailed report emailed to you.
Take the quick check →How it works
Three steps from sign-up to a trained, tested team
Short lessons your people actually finish, real simulations that show who would have clicked, and a report you can hand to an auditor.
- 1
Assign the right track
Every employee starts with All-Staff Core. Managers, finance, IT, remote workers, regulated sectors, and focused topics like phishing, ransomware, or secure AI use layer on as add-on tracks.
- 2
Staff complete short lessons on Skillermatic
3-7 minute videos with tracked completion, a certificate with a QR code for every course, and a steady monthly drip instead of one long annual session.
- 3
You run simulations and see proof
Rotating phishing, smishing, and vishing simulations track open, click, submit, and report rates, with an executive PDF report and a monthly summary email you can show an auditor or regulator.
How teams use Cyberwareness
Four everyday jobs it is built for
These are not customer stories. Each one shows how a real part of the product fits a real job.
New staff
A new hire's first 30 days
Challenge
New people join all the time and nobody has hours to spare. One long course gets clicked through and forgotten.
How it helps
Everyone starts with All-Staff Core: 25 short lessons, tracked on Skillermatic. Each lesson is 3-7 minutes, so it fits between tasks.
- Day 1Assigned All-Staff Core
- Days 1-30Short lessons, one at a time
- FinishFinal exam and a certificate with a QR code
25lessons in All-Staff Core
~100 minin total
30 daysto finish
Phishing
The finance team and the fake invoice
Challenge
A "vendor" emails to say their bank details changed, right before a payment run. It looks normal, and it is the kind of email finance teams get every week.
How it helps
The Finance and Payments track (10 lessons) teaches the check. A simulation then tests it with a made-up vendor invoice email, and a click gets an instant 3-minute lesson.
- LearnFinance and Payments track
- TestA fictional vendor bank-detail change email
- Re-testAbout 30 days later for anyone who clicked
10lessons in the finance track
3 mininstant lesson after a click
30 daysto the re-test
Managers and audits
The manager who needs proof
Challenge
An auditor or a boss asks, "Can you show that staff are trained?" A list of who watched a video is not much of an answer.
How it helps
Each simulation reports sent, opened, clicked, submitted and reported rates by department. You get an executive PDF and a monthly summary email, plus a 12-month plan to follow.
- Each monthShort lessons and a simulation
- After each runRates by department, compared with last time
- AnytimeExecutive PDF and a summary email to share
5rates tracked per simulation
12months in the plan
1-2simulations a month
Getting started
Not sure where you stand? Start free
Challenge
You want to know your risk before you buy anything, and you do not want a long sales process.
How it helps
Run the free baseline phishing test on up to 25 staff, take the 6-question quick check, or play Spot the fake. Then decide.
- Step 1Pick a free tool
- Step 2See a real result
- Step 3Book a demo if it helps
25staff in the free baseline test
6questions in the quick check
3free tools to try
No stories in this group yet.
Built for, not built up
Honest proof points
Cyberwareness is a training program built by AkolagTech, powered by Skillermatic. We would rather tell you exactly what it is built for than invent a client logo wall.
Built for compliance-aware teams
Every module maps to a named framework (NDPA, CBN, GDPR, ISO 27001, PCI DSS, HIPAA, FTC Safeguards, NIST CSF), listed openly on each course page, including where a clause still needs your own verification.
Built on a working curriculum
178 modules across 17 tracks, upgraded from AkolagTech's existing 13-video paid course and 8-video free course into a tracked, micro-learning program on Skillermatic.
Supported by AkolagTech
Supported by AkolagTech, rated 4.9 on Google (12 reviews)
These are AkolagTech's client reviews. AkolagTech provides IT management and support for Cyberwareness. They are not reviews of Cyberwareness itself.
★★★★★
Akim jumped into our problem and expeditiously fixed it. There will be a part 2 and we will hire Akim to follow the project plan. Never unavailable!
Rithum Automation
Upwork client · 2021Check on Upwork ↗
★★★★★
Can't say enough good things. Works hard and has the knowledge to take care of the work.
VenOps
Upwork client · 2021Check on Upwork ↗
★★★★★
Akim did a great job. He completed everything that was asked of him and did it quickly. Additionally he was very accessible if I had questions.
Upwork client · 2021Check on Upwork ↗
- A global course, plus the threats that matter where your team works.
- Free phishing checker and team phishing test.
Frequently asked questions
Is this the same as Skillermatic?
Cyberwareness is the training program and the brand your staff see. It runs on Skillermatic, the platform where staff log in, watch micro-lessons, and get tracked for completion.
Does this help with NDPA, CBN, GDPR, HIPAA, or FTC Safeguards training requirements?
The curriculum is built around NDPA, CBN, GDPR, ISO 27001, PCI DSS, HIPAA, and FTC Safeguards Rule awareness topics, and it supports the staff-training expectations in each. We phrase this carefully: training supports your compliance program, and we recommend confirming specific clause wording with your own compliance advisor before citing it to a regulator or auditor.
How long does training take per employee?
The All-Staff Core track is about 100 minutes total across 25 micro-lessons of 3-7 minutes each, designed to be completed in the first 30 days. After that, staff get a steady monthly drip of 1-2 short lessons plus a phishing simulation, instead of one long annual session.
Can we run phishing simulations as part of this?
Yes. The program includes a rotating library of phishing, smishing, and vishing simulation templates, each followed by an immediate, specific teachable moment when someone opens, clicks, submits, or calls back - and anyone who clicks or submits is automatically scheduled for a 30-day re-test. You can also start with a free baseline phishing test for up to 25 staff before committing to anything.
Do you support both African and global teams?
Yes. Every team gets the global course, plus the threats that matter where they work. In the US that includes CPA/tax firms (FTC Safeguards) and dental/medical practices (HIPAA); in Europe, GDPR; in Africa, deep Nigeria coverage (NDPA, CBN, POS fraud, SIM-swap, BVN/OTP scams) plus Ghana, Kenya, and South Africa. The page you are reading adjusts automatically to where you are - use the region switcher in the header to change it.