About the game · By James Linton
Inbox Arena is a free solo social engineering game. Choose Quick Drill, Full Campaign or the rotating Daily Challenge. Take the attacker’s or defender’s side, make a decision, then read why the message works and what action it is trying to trigger.
It is a learning exercise built from BattlePhish and Ask&Do. The scenarios are fictional. Scores, ranks and simulated hit rates are game mechanics, not measurements of your security or predictions of real-world attack success.
In one of the game’s fictional encounters, a message calls itself Microsoft 365 Security and says:
We blocked a sign-in from a new location. Confirm this was you within 30 minutes or access to your account will be restricted.
The game’s answer is to report it. The familiar display name does not establish who sent it. In this fictional example, the sender uses a lookalike address and the deadline is made up. To check an actual sign-in concern, open the service independently through your usual route.
The reveal explains the context, request and action after you decide. That explanation is the lesson; the score helps keep the practice engaging.