EDITORIAL NOTES / VERSION 1.0.0

A fictional scenario.
Publicly grounded guidance.

The story, events, prompts and interface are original. Public guidance informed general learning points. Sources were consulted on 7 September 2026. Their inclusion does not imply endorsement, affiliation or independent review.

• FBI: Business Email Compromise — independent verification of payment-detail changes.
• FBI: Business E-mail Compromise on the Rise — established contact numbers and prompt bank contact when funds are sent.
• NCSC: Business email compromise — account compromise and organizational defenses.
• Australian Cyber Security Centre: Exercise in a Box — discussion-based exercise structure. This is also a free alternative worth considering.

We do not reproduce those organizations’ exercises or sell their materials. The paid product provides its own guided workflow and fictional exercise.

Scope

We do not give jurisdiction-specific legal deadlines, certify control effectiveness or prescribe provider-specific recovery commands. For a real incident, use current guidance, your authorized responders and appropriate local reporting channels. Funds recovery is never guaranteed.