Registration Form
Complete the form below to join the 2026 Phishing Derby. Then, get ready to catch phish and build your Email Safety Score™.
Learn more about the Derby →📋 Hand the device to your coworker and have them enter their own information below.
Your registration is confirmed!
You're registered for the 2026 Phishing Derby. If you're attending a Pin Pick-Up Party, show the hosts this confirmation page or the registration confirmation email you just received. Get ready to catch phish and build your Email Safety Score™.
—
—
—
—
You're in, —!
You're all set for the 2026 Phishing Derby. If you're attending a Pin Pick-Up Party, show the hosts this page or your registration confirmation email to collect your pin. Get ready to catch phish and build your Email Safety Score™.
—
—
—
—
—
Share this code with coworkers so they can enter it when registering
Brought to you by
Digital Defense — Digital safety is safety.
🏆 Superfan Referral Leaderboard
Top recruiters win a prize! Share your code to move up.
| Rank | Superfan | Referrals |
|---|
Your Derby Wrapped
Here's how you did in the 2026 Phishing Derby
🏆 Top performers
| # | Participant | Email Safety Score | Tier | Badges |
|---|
🎉 Claim your prize
Please provide a physical street address. We cannot ship to P.O. boxes.
USPS standardized address:
✅ Address submitted. Your prize kit will be on its way soon.
Brought to you by
Digital Defense — Digital safety is safety.
The Phishing Derby will return
Stay safe out there.
Brought to you by
Digital Defense — Digital safety is safety.
The Phishing Derby is coming soon
Check back later for registration.
Brought to you by
Digital Defense — Digital safety is safety.
Registration is closed
The Phishing Derby is underway and registration has closed. You're not currently a participant, so the leaderboard isn't available to you. If you believe this is an error, contact Digital Defense at DigitalDefense@delta.com.
Brought to you by
Digital Defense — Digital safety is safety.
Your prize tier
Your Email Safety Score™ sets your prize tier. Climb from Rookie to Fighter to Defender to Champion. The higher you go, the better the prize.
Tap a color to see the tier name
Here's how your Email Safety Score™ is calculated.
Want to learn more? Visit the Resources tab to see how your Email Safety Score™ works.
Points trend
Tap or click a bar to view points earned or lost per simulated email.
Tap a bar to see simulation details
Risky behaviors
Risky behaviors lower your Email Safety Score™. Here's what we spotted across your sims. Each one's a chance to sharpen your instincts.
Badges earned
Badges you can earn
Security trainings assigned to you during the Derby. Finish each one by its due date to earn bonus points toward your Email Safety Score™ — on-time completions are what count.
| Training | Type | Due | Status |
|---|
Every simulated phishing email you've been sent during the Derby. Click a campaign name to see a safe copy of the message, the warning signs that gave it away, and how it affected your Email Safety Score™.
| Campaign | Date Received | Outcome | Details | Score |
|---|
| Rank | Participant | Email Safety Score | Tier | Badges | Kudos |
|---|
No participants match your search.
| # | Division | Participants | Avg. email safety score | Report rate | Click rate |
|---|
Why these numbers matter
These are real actions Derby participants took on simulated phishing emails. In a real scam, each one could hand a scammer access to Delta accounts or data. That's why spotting and reporting these emails matters.
My team
| # | Name | Email Safety Score | Tier | Badges |
|---|
Division standings
| # | Division | Participants | Avg. email safety score | Report rate |
|---|
Bonus Points
Earn extra points toward your Email Safety Score™ by completing activities and trainings. We add new bonus opportunities throughout the Derby. Check back often for fresh ways to boost your score.
🎯 Activities
Bonus activities are quick, hands-on ways to earn extra points. New activities unlock throughout the Derby, so it's worth checking back often. Open any active tile to see what it involves and how many points it's worth. Activities must be completed by the due date to earn points. For the best experience, complete them on a computer.
🛡️ Digital Safety Trainings
Digital Safety Trainings are microlearnings assigned to you in ZenGuide during the Derby. When a new one is assigned, you'll get an email, and it'll appear here too. Complete it on time to earn bonus points. Tap a tile to open the training in ZenGuide.
🔄 Derby 'Demption Trainings
Derby 'Demption Trainings are your redemption round. One is assigned only when you take a risky behavior on a simulated phishing email, like clicking a link or entering credentials. Complete it on time to earn bonus points and sharpen what to watch for next time. When one's assigned, it shows up here — tap the tile to finish it in ZenGuide.
Phishing Derby resources
Add a resource link
Remove item
Are you sure you want to remove this item?
Your Email Safety Score™ is built from three categories during the Derby: safety actions that earn points, risky behaviors that cost points, and bonus points from trainings and activities. The breakdown below shows what each one is worth.
🛡️ Safety actions up to +150 per sim
Context and sender bonuses are auto-awarded when you report AND have zero risky behaviors on that simulation. Report within 3 days to receive credit.
⚠️ Risky behaviors deductions per sim
Your score can never go below 0. Every risky behavior on a simulation reduces your score.
🎯 Bonuses one-time awards
Training must be completed by the due date to earn bonus points. Late completions do not count. Both trainings are assigned through ZenGuide. 'Demption Training is only assigned when you take a risky behavior on a simulation — it's your chance to redeem yourself. Digital Safety Training is randomly assigned during the Derby, and you'll receive an email when new trainings are available.
Meet the Scammers
The Slimy School of Phish is our crew of scammers. Each one represents a different goal, from stealing your login to slipping past your defenses, and brings its own personality and tactics. Tap each phish to learn how they operate, what gives them away, and how to catch them.
Choose your phish avatar
Pick a phish character to represent you on the leaderboard.
Profile tagline
Add a short tagline that appears under your name on the Individual Leaderboard, a fun way to show your personality (up to 60 characters).
Leaderboard display settings
Control how your name appears on the public leaderboard.
Communication preferences
Choose which notifications and updates you'd like to receive.
Time at Delta
When did you join the Delta family? This may be shown on the Featured Participant spotlight.
Your Derby Achievements
You earned a prize!
Your Email Safety Score™ qualifies you for Derby Dollars. Instructions on how to redeem your Derby Dollars will be emailed to you soon.
Certificates
Your certificate brings your prize tier and badges together on one personalized design. Certificates are released at the end of the Derby — once final scores and awards are locked in, your certificate appears here to download as an image and save, print, or share what you accomplished this Derby.
No achievements yet. Participate in the Derby to start earning badges and tiers.
Registered participants, returning vs. new breakdown, and employee types.
By employee type
Tier distribution and badge earners across all participants.
Tiers
Badges
Breakdown of campaigns by delivery method.
Aggregate risky actions taken across all simulations.
Average reporting and scoring performance.
Compares susceptibility and report rates between Derby participants and non-participants.
Susceptibility rate = % who took at least one risky action on non-Derby sims
Failure locations — click a row to drill down into participant details.
| City | State | Failures | Mobile |
|---|
—
| Participant | Campaign | Event | Device |
|---|
Report, click, and credential rates by division with color-coded thresholds.
| Division | Participants | Report rate | Click rate | Cred rate | Avg. email safety score |
|---|
Track Derby investment and calculate cost per participant for leadership reporting.
Compare performance and engagement between participants who collected a pin vs. those who didn't.
Bulk override participant scores for false positives or manual corrections. Select a campaign and behavior, then apply to affected participants.
Upload a CSV with an "Email" column. Participants matching those emails will be selected for the override.
Override history
🎯 Bonus Activity Overrides
Manually award or revoke bonus activity points for individual participants.
Activity override history
| # | Name | PPR | Years | Engagement | Pin | Waitlist | Remove |
|---|
—
—
Simulation history
Visual summary of registration form data. Updates live as new registrations come in.
Performance metrics for each phishing simulation campaign. Report rate column highlighted in green (safety action).
| Campaign | Type | Status | Sent | Clicked | Attach | QR | Creds | Fwd | Repeat | Training | Report Rate |
|---|
Aggregate training assignment status across all participants.
| Training | Type | Assigned | Completed | In Progress | Overdue | Not Started | Completion Rate |
|---|
Identifies potential false positives from email security scanners (Microsoft ATP/Safe Links). Flagged records show automated interactions that may have incorrectly triggered failures and training enrollment.
| # | Campaign | Type | Participant | Sent | Event Time | Time Delta | Whois Org | Confidence | Time Since | Training Status | Also Submitted Creds? |
|---|
Participant-level phishing simulation data with exports for CSV, per-sim breakdowns, heatmaps, and geographic failures.
| # | Name | Division | Email Safety Score | Tier | Reported | Clicked | Creds | Badges |
|---|
Training assignment completion data filtered by entity, name, status, type, and date range.
| # | Name | Division | Assignment | Type | Status | Due date | On time | Score |
|---|
Winners earn Derby Dollars redeemable at the Delta Employee Shop (IceBox). Export the eligible list, send to IceBox, then import their codes back here to email winners.
Import IceBox codes
Upload a CSV from IceBox with columns: Email, Code. Codes will be matched to eligible participants.
| # | Name | Company | Email Safety Score | Tier | Amount | Code | Status |
|---|
Bug reports submitted by testers via the feedback widget's QA mode. Filter by severity, page, or status.
| # | Severity | Page | Description | Reporter | Date | Screenshot | Status | Action |
|---|
View completion data for all bonus activities. Filter by activity or status, then export for detailed analysis.
| # | Participant | Activity | Type | Points | Attempts | Completed | Manual |
|---|
| Reaction | Participant | Comment | Screenshot | Date |
|---|
Configure which notification categories participants can manage on their Profile tab. Categories linked to automated triggers will check participant preferences before sending.
Configure emails that fire automatically when Derby events occur. Each trigger uses an email template and sends to the affected participant(s).
| Trigger | Template | Status | Sent | Actions |
|---|
Trigger activity log
| Timestamp | Trigger | Recipient | Template |
|---|
Create emails from scratch or load a saved template. Compose your message, select your audience, then send or schedule.
Custom merge fields
Add custom fields that can be used in templates. Values are injected at send time.
Scheduled emails
New Banner Message
Filter data to Derby-specific campaigns and date ranges. Turn on to scope the leaderboard to your active Derby.
Entity
Date filters
Campaign type
Campaign name
Training assignment
Manage Derby dates, lifecycle state, and what participants see at each stage.
Dates
Change state
Preview states
Preview what participants see at each lifecycle stage without changing the active state.
Manage superfan referral codes. Upload a CSV (Email, Code, Name, Division) or add individually. Codes are 6 uppercase characters.
| Rank | Name | Code | Referrals | Remove |
|---|
Upload prior year participant data. Supports two formats: column-per-year (e.g. "2025 Participant?", "2025 Top Reporter?", "2025 Champion?") or row-per-year (columns: Email, Year, Derby Champion, Top Reporter, Unphishable, Highest Points Earner).
| Years | Champion | Top Reporter | Unphishable | Highest Earner |
|---|
Configure the guided walkthrough shown to first-time visitors. Each step can navigate to a specific tab for context.
Configure how points are earned and lost. Changes take effect immediately on save and trigger a full re-score.
Max = (safety actions per sim × sims) + (admin trainings × per-training points) + bonus points planned. 'Demption Training excluded (only assigned on risky behavior). "Bonus points planned" is a target you set — configure the individual activities in the Bonus Activities section below.
▼ Scoring actions
Click an action to configure it. Each action has a trigger field from the ZenGuide data and a condition that determines when it fires.
▼ Bonus Activities
Click an activity to configure it. Each activity awards bonus points on completion.
Define prize tiers, badge criteria, and certificate designs. These determine what participants earn for their scores.
▼ Prize Tier Settings
Click a tier to configure it. Tiers determine the prize level participants earn based on their Email Safety Score™.
▼ Badge Settings
Click a badge to configure its criteria, descriptions, and image.
▼ Certificate Template Uploads
Upload custom PNG backgrounds for achievement certificates. Each tier gets its own background. Badges earned are rendered on the same certificate. Recommended size: 11×8.5" landscape (1100×850px).
Prize Tier Certificates
Upload one background per tier. The participant's name, score, and tier are overlaid on download.
| Tier | Certificate background | Preview |
|---|
Preview and customize automated celebration triggers that participants experience during the Derby.
Email campaign history
| Template | Date sent | Audience | Sent | Opened | Clicked | Bounced | Open % | Click % | Engagement |
|---|
Device & Platform breakdown
How recipients view your emails — based on open and click event User-Agent data.
Email client
Device type
Operating system
Note: Apple Mail Privacy Protection may mask some device data. Percentages based on trackable opens only.
Engagement Heatmap
Best times to send — based on open events by day and hour
Email analytics are updated in real-time via SES event tracking. Open and click rates may take up to 24 hours to fully populate.
Simulation content management
Configure email previews, scam indicators, attachments, and landing pages for each campaign.
| Campaign | Type | Envelope | Indicators | Attachment | Landing Page |
|---|
No simulation content configured yet. Click "+ Add simulation" to get started.