The Urgent Wire Escalation · Free demo · No sign-up
A 15-minute game where your team handles a suspicious payment request before the 5:00 PM wire cutoff. They practice the one call that stops a scam, before a real one shows up.
Play your industry's version: Dental or medical Accounting Auto dealership Property management Manufacturing Front desk
Confidential — wire needed today
I'm boarding a flight and can't take calls. Please send $36,750 to Brightline before 5. Don't loop in others.
You work at Harlow & Pike. Your email ends in @harlowpike.com. Would you send it?
Source: FBI Internet Crime Complaint Center, 2025 report (business email compromise). The average is our math: $3.05B across 24,768 complaints.
Your player runs payments at a small firm. Every email, call and question costs time on the clock.
New bank details, or an urgent ask from the boss.
Follow-ups pile up. The boss is "unreachable."
Check the sender, call the number on file, get approval.
Pay, hold or escalate. Then see what it cost.
One is legitimate, so refusing everything loses too.
Add your company name, approver, approval limit and callback rule. Your team practices your process.
Team mode adds roles and discussion pauses. A printable guide makes it a 30-minute session anyone can run.
Each player gets a one-page Practice Record with a sign-off line for their manager. Print it or save it as a PDF.
Most training teaches people to spot a scam email. The money is lost one step later, when someone decides to pay. That's the step ShiftPoint practices.
| Question | ShiftPointPlay a realistic payment crisis | Training videosWatch, then take a quiz | Fake phishing emailsTest emails sent to staff | WebinarsListen to an expert |
|---|---|---|---|---|
| Does your team practice deciding whether to pay? | Yes | No | No | No |
| Does it use your company's own rules and names? | Yes | No | Some | No |
| Do they see what a mistake would cost? | Yes | No | No | No |
| Can your team do it together? | Yes | No | No | Some |
| Do you get a record of what each person did? | Yes | Some | Some | No |
| How is it priced? | $390/yr for up to 25 players | Per person, per year | Per person, per year | Per person, per session |
✓ yes ~ some do – no. Compares common types of training, not specific companies.
ShiftPoint can be one part of that training. You decide what meets your requirements. Not legal advice.
Best for small offices
Only the people who touch payments need a seat. Twelve people? Start with the $149 session; it comes off the $390.
Set up your versionJust want to try it with your team once? Team Session: $149, one time. One team of up to 15, one 30-minute session, a Practice Record for each player. The $149 comes off any plan you start within 30 days.
Play the free challenge and the free demo with your team. If you buy and it's not for you, get a full refund within 30 days.
The first five offices (any size up to 100 people) run the full game free for 30 days. In return, tell us what worked and what didn't. A short quote helps if you're happy, with or without your name. Your team's results are never published.
IT firms: the first three partners get the 5-client starter free on the same terms.
Not ready to play yet? Take the free bank-change fraud check: 8 questions, about 5 minutes.
Early-access pricing. To start, set up your version or email us. We confirm your plan, any credits, the referral bonus and the refund promise in a short written agreement.
Set it up with each client's names and rules, run it in a 30-minute review, and turn the gaps it shows into follow-up work.
I'm Fynn Toppert, an educator in Cedar Rapids, Iowa. Like almost everyone, I've clicked through training videos just to make them end, then forgotten all of it by the next day. My whole career is figuring out how to get people genuinely into learning something, and the answer is almost never another slideshow.
So ShiftPoint is built to be fun. Your team makes the call, sees what happens, argues it out, and finds out who kept the most money safe. When training feels like a game people want to win, they remember it. It also tells your people something: this company respects their time.
The situations follow how business email compromise actually works, as described by the FBI's Internet Crime Complaint Center, and the controls finance teams use against it: calling back on a number you already have, and a second approver for changes to bank details.
ShiftPoint Crisis Labs LLC is an Iowa company, and it's founder-led. When you email, you'll hear back from me directly.
Some crime and cyber policies limit payment-fraud coverage unless staff followed verification steps, like calling the vendor back on a known number. ShiftPoint lets your team practice those steps, and each Practice Record shows what they did. With Small Office or Business, the manager report also has a renewal worksheet that lines up common social-engineering application questions with what your team actually practiced. See a sample worksheet. It isn't a certification and doesn't guarantee coverage, so ask your broker what they require.
It can be one part of it. The FTC Safeguards Rule and the HIPAA Security Rule include training requirements for businesses they cover. Your organization decides what meets its own requirements.
All five situations set up with your company name, approver, approval limit and callback rule; unlimited plays; team sessions and a challenge scoreboard; a Practice Record for every player; and a manager report of who played, when and how they did. See a sample manager report.
If someone at your company pays bills or changes bank details, yes. You can set the story for a dental or medical office, an accounting firm, an auto dealership, a property management company, a manufacturer or a general office, and it uses your own names and rules. There's also a free 5-minute case for the front desk: the gift card text.
No. It runs entirely in your browser. Your company settings live only in the link you share. See the privacy notice.
About 15 minutes solo, or a 30-minute team session using the free facilitator guide.
ShiftPoint is a training tool, not a certification or a guarantee of real-world outcomes, insurance coverage or audit results.
Play the demo with the people who approve your payments, then email us. We'll reply with a short note on what your process caught and where it might slip. Everything happens by email.
Please don't email passwords, account numbers or other sensitive records.