Across 2025, according to APWG reporting.
Cyber Awareness Roadshow
Think before
you trust.
Phishing succeeds by making an unsafe action feel familiar, urgent and completely normal.
5-minute briefing · then the live demoThe scale
Phishing is not
slowing down.
Unique malicious QR codes detected in Q4 2025.
Social media and SaaS/webmail each represented 20.3% of Q4 attacks.
Source: APWG Phishing Activity Trends Report, Q4 2025. Figures are observed/reported activity, not every attack worldwide.
The anatomy
One message.
Three levers.
1
TrustA familiar brand, colleague or service lowers our guard.
2
PressureUrgency pushes us to act before checking.
3
ActionA link, QR code, attachment or request completes the trap.
A
Travel Servicesrewards.airasia.com
Your points expire today
Confirm your account now to keep your reward. This verification link is valid for 10 minutes.
Verify account nowThe five-second check
Pause. Inspect.
Then decide.
Unexpected
You did not initiate the request or expect the reward.
Urgent
The message manufactures a deadline or consequence.
Wrong domain
The real destination differs from the brand being shown.
Asks for secrets
Password, OTP, PIN or payment details appear unexpectedly.
Hard to verify
The request cannot be confirmed through a trusted channel.
If something feels wrong
Stop the chain
early.
A fast report protects more people than a quiet delete.
01
Do not continueDo not sign in, approve an MFA prompt, download or reply.
02
Verify independentlyOpen the official app or type a known address yourself.
03
Report immediatelyEmail infosec.incident@airasia.com.
04
If you acted, say soFast disclosure helps responders protect your account and others.
Ready for the roadshow demo?
Experience the lure.
Spot the moment.
The next journey is an authorised simulation. Use only the supplied demo data—never a real password.
01 · QRScanA familiar action begins the journey.
02 · LURENoticeWatch how trust and urgency are constructed.
03 · REVEALLearnSee what the page and browser expose.
04 · REPORTRespondPractice the safe action you would take at work.
Safety guidance informed by the FBI IC3 social-engineering advisory.