Skip to content
  • There are no suggestions because the search field is empty.

How to Set Up a Phishing Simulation

Goal: Learn how to start a phishing simulation in Wizer and choose the right type of campaign for your needs.

 

Before You Begin

Before you launch your first phishing simulation, make sure everything is ready for a smooth delivery:

  1. Whitelist Wizer IPs and domains so your simulation emails don’t get blocked:

  2. Confirm your users are set up – by default, only registered users can receive phishing simulation emails, if you would like to send to unregistered users please read our article on Silent Phishing

  3. Plan your goal:

    • Are you testing awareness once?

    • Or building an ongoing, adaptive program?

This will determine which campaign type to use next.

Step 1. Go to Phishing Simulation

From your Admin Panel, click Phishing → Create Campaign.

You’ll now see two options:
One-Time Phishing and Smart Phishing.

Step 2. Choose Your Campaign Type

Option 1 — One-Time Phishing Campaign

A single round of phishing emails.
Perfect for a quick test or first-time simulation.

✅ Ideal if you want to:

  • Send a one-off phishing test to see who clicks.

  • Measure baseline awareness.

  • Quickly identify users needing extra training.

📘 Go here next:
👉 How to Set Up a One-Time Phishing Campaign

Option 2 — Smart Phishing Campaign

An automated, ongoing simulation program.
Smart campaigns send phishing emails on a recurring schedule with new templates each round.

✅ Ideal if you want to:

  • Continuously train users with fresh phishing scenarios.

  • Automatically include new employees.

  • Track long-term trends and behavior improvement.

📘 Go here next:
👉 How to Set Up a Smart Phishing Campaign

Step 3. Monitor Results

After you start your campaign, you can:

  • View live stats for emails sent, opened, clicked, and phished.

  • Access detailed reports and user performance trends.

  • Archive completed campaigns for record keeping.

📊 Learn more: Reporting

Tips for Best Results

  • Spread delivery across days and times so employees don’t all receive the same email simultaneously.

  • Review templates carefully to ensure they match your tone and risk level.

  • Communicate internally after the campaign to reinforce learning — not punishment.

Next Steps: