PortalPoint Learn
Short lessons for the moment before you click.
Plain-language security and systems lessons for people who run small businesses. Each one explains the risk, shows what it looks like, and ends with a decision you can actually make.
Phishing or scam link
How to spot phishing links
A phishing link is a link designed to trick you into giving up information, installing something, paying a scammer, or opening a fake sign-in page.
Mismatched link text
When a link says one site but opens another
A mismatched link happens when the words on the page say one destination, but the actual link target points somewhere else.
Lookalike domain
Fake websites that imitate real brands
A lookalike domain is a web address that imitates a real brand closely enough to trick people who are moving quickly.
Raw IP address link
Why numbered website addresses can be risky
A raw IP address link points directly to a numbered network address instead of a human-readable domain name.
Credentials inside URL
Why links should not contain usernames or passwords
Some URL formats can include usernames or passwords before the host. Modern sites should not ask you to trust links that contain credentials.
Dangerous URL scheme
Links that try to run code instead of opening a site
A URL scheme tells the device what kind of action to take. Some schemes open websites; others can trigger apps, files, scripts, or system actions.
Malware-like URL
Links that may lead to malware
A malware-like URL is a link with signals commonly associated with harmful downloads, fake updates, or pages that lead users toward unsafe installation.
Defacement/compromised-site signal
Websites that may be compromised
A compromised-site signal means the domain may be legitimate, but the specific page may have been altered, abused, or used to redirect visitors.
Prompt injection
Pages that try to manipulate an AI assistant
Prompt injection is content that tries to manipulate an AI assistant into following the attacker's instructions instead of the user's intent and safety boundaries.
Private-info boundary
When someone asks the assistant for private context
A private-info boundary alert means a page or person may be trying to get an assistant to disclose context that should stay private.
Unreadable or unverifiable link
When a link cannot be safely checked
An unverifiable link is a link the safety check cannot inspect with enough confidence.
For teams
Turn these into a session for your staff.
A forty-minute walkthrough of the lessons that matter to your business, using your own mail, your own vendors and the scams your industry actually sees.
Ask about training