
To enhance staff awareness against suspicious emails, the Hong Kong Internet Registration Corporation Limited and the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force ( are jointly organising the "Ethical Phishing Email Campaign 2025" (Campaign) and invite organisations to participate. The Campaign is supported by the Office of the Privacy Commissioner for Personal Data.
The exercise aims to educate employees on identifying suspicious emails and strengthen the cybersecurity resilience of participating organisation. It is expected to run from November to December 2025 at no cost. During this period, participating organizations will receive simulated phishing emails at the provided email addresses to test their employees’ cybersecurity awareness. Upon completion, each organisation will receive a detailed report summarizing their staff’s performance in handling suspicious emails.
Interested organizations should submit their applications below 14 November. Each organisation may register up to 200 email addresses, with registrations processed on a first-come, first-served basis due to limited availability. To ensure smooth coordination, please designate a primary contact person (and one alternate, if needed) for registration follow-up.
For details, please visit https://cybersec.hkirc.hk/en/programme/ethical-phishing-email-campaign.