Callback phishing simulator
Callback phishing simulation, from the email to the call
See who calls, who shares the code and who reports the email.
Measure the call the email asks for
600+ callback templates, email and voice, with voice in 7 languages.
Callbacks are one channel. Email, voice, SMS and QR codes run alongside them in the multi-channel phishing simulator.
Trusted every day by security teams that measure behaviour, not attendance
The call leaves no email trace
How a callback phishing simulation works
Email, call, measure
1. Email
An email carries a number and a code.
- From 250+ templates
- Red flags marked for coaching
- Delivered by SMTP or Direct Email Creation
2. Call
The employee calls a Keepnet number.
- Text-to-speech or your own recording
- The code links the call to the employee
- Numbers are never spoofed
3. Measure
A result for each employee, stage by stage.
- Opened, called back, entered digits
- Reported with one click
- Training to follow
Text-to-speech or your own recording
Text-to-speech
A scripted line in the AI voice and language you pick.
Your own recording
Upload audio for the call greeting and each step.
Identification code
The caller enters it, so the result lands on the right record.
Keepnet calls the employee instead? That is the vishing simulator.
The email and the number work together
- 250+callback scenarios
- 250+email templates
- 300+voice templates
- 7voice languages
Keepnet-owned numbers
Assigned to your account, within your licence. Never spoofed.
Email and voice as a pair
One template carries both sides of the scenario.
In their language
Voice lines in the language you pick.
The teams that take the most calls
Smart groups
Repeat clickers, new hires and untrained employees.
By role
Finance, help desk and executive assistants, as their own groups.
Sending hours
The days and hours you set, in your time zone.
AI prepares the scenario, you approve it
Red flags marked
AI marks the red flags in each email.
In your policy and tone
Agents create templates within your company policy.
Approval first
Nothing is sent until you approve it.
Employees report a suspicious callback email in one click
One click to report
The Keepnet Phishing Reporter add-in, in the mail client.
The right behaviour, counted
A reported simulation shows on the employee’s record.
Suspicious emails analysed
Reports that are not simulations go to Incident Responder.
See whether callback simulations change behaviour
A result for each employee, stage by stage, compared across campaigns.
Opened email
Last opened, times opened
Called back
Last caller ID, times called back
Entered digits
Last entered, times entered
Reported
Last reported, times reported
Bot activity is flagged and can be hidden. See how results roll up in reporting.
Questions to ask a callback phishing simulation vendor
| Question | Keepnet |
|---|---|
| Does it link the email to the call? | Yes, with an identification code per employee. |
| Whose numbers are the calls to? | Keepnet-owned, never spoofed. |
| Can we use our own recording? | Yes, or voice templates in 7 languages. |
| Does training follow the simulation? | Yes, during the call or after it ends. |
| Where is the data kept? | In the region you choose. |
| Can we buy it on its own? | Yes. |
The evidence is published, not on request
Four current certifications, independently audited. Certificates and the full control set are published at doc.keepnetlabs.com/resources/compliance.
Pricing
Buy the callback phishing simulator on its own
Priced per employee, as part of the secure behaviour management platform.
See the plan prices- Pay only for what you runStart with one simulator and add the rest later.
- Priced per employeeThe more employees you cover, the less you pay per employee.
- Add to what you runCallback simulations alongside your email, voice, SMS and QR code simulations, in one console.
- Try before you commitTry and buy, or a proof of value with your own employees.
"It would be unfair to single out just one feature. The mail scenarios and customisable training modules are particularly excellent."
"It's a really great platform with a lot of flexibility to ensure our requirements are met. Onboarding was friendly, enjoyable, and thorough."
"It's super easy and intuitive to setup campaigns, whilst making it easier for end-users to report phishing emails."
"The product itself works great on day one and delivers immediate value as our team was able to get started with our phishing exercise program immediately."
"It has been consistent, reliable, and implementations over time shows that they really listen customer feedback."
"We've seen a noticeable improvement in how employees react to suspicious emails or phone calls- because they remember the stories."
"Within minutes, we can create realistic, scenario-based templates specific to our organization, reducing setup time while increasing the relevance of training."
"The simulations and campaigns are very customisable and realistic."
"Thanks to Keepnet's Incident Response tool, we reduced the e-mail analysis and response time, which used to take hours, to 2 minutes."
Keepnet Labs has a rating of 4.9 out of 5 based on 104 ratings in the Security Awareness Computer-Based Training market on Gartner Peer Insights as of October 2026. GARTNER is a registered trademark and service mark, and PEER INSIGHTS is a trademark and service mark, of Gartner, Inc. and/or its affiliates, and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences, and should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates.
What buyers ask about callback phishing simulation
Short answers first. New to the topic? Read what callback phishing is.
A callback phishing simulation sends employees a harmless email that asks them to call a number, then records who calls, who enters the requested code and who reports the email.
It is also called a TOAD (telephone-oriented attack delivery) simulation.
The email carries a Keepnet phone number and an identification code. When an employee calls, a scripted voice line plays and asks for the code, and each step is recorded against that employee.
Who opened the email, who called back, who entered digits, who reported it and who did not respond, with dates and counts for each employee.
Keepnet-owned numbers assigned to your account, within your licence. Calls are never spoofed.
Each email carries its own identification code. The caller enters it at the start of the call, so the result lands on the right record.
A text-to-speech message in the AI voice and language you pick, or a recording you upload.
Callback voice templates come in 7 languages, across 600+ email and voice templates.
Training follows, during the call or after the simulation ends, so the result turns into practice.
With the Keepnet Phishing Reporter add-in. A reported simulation counts as the right behaviour on the employee's record.
In a callback simulation the employee places the call. In a vishing simulation Keepnet calls the employee. Both run from the same console.
Yes. It can be bought on its own, priced per employee, or inside a plan with Keepnet's other simulators and training.
See it with your teams in mind
- A scenario in your languageThe email, the number and the voice.
- One campaign, end to endScenario, employees, schedule and report.
- What employees see and hearThe email, the line, then the training.
- Your rolloutNumbers, groups and the report button.
Book a demo
Thirty minutes, no cost and no obligation.
Thank you, your request is in
A confirmation is on its way to your inbox.
Thirty minutes with the Keepnet team, on Microsoft Teams. Your details are already filled in.
Prefer to pick a time later? The team will follow up within one working day.
Your demo is booked
A calendar invite is on its way to your inbox, with a Microsoft Teams link.
The booking calendar will not open in this page.
Open the calendar in a new tabSources
- Keepnet console, dash.keepnetlabs.com, read 16 October 2026: Callback Simulator scenarios (email and callback template), callback template editor (text-to-speech or file upload), callback phone number settings and the training library. Names are fictional.
- Keepnet content library statistics, stats.keepnetlabs.com, 16 October 2026: callback scenarios, email and voice templates, voice template languages.
- Verizon, 2026 Data Breach Investigations Report, p. 50. Median click rates in phishing simulations: about 2% for phone-centric vectors (voice, SMS, callback) and about 1.4% for email, so roughly 40% higher. Keepnet is a contributor (p. 118).
- Verizon, 2026 Data Breach Investigations Report, p. 16.
- Keepnet documentation, Callback Campaign Reports.
Page reviewed