B BROCENT

security awareness

Cover image for Brocent IT blog post: Ten Employees Clicked the Fake Invoice: Phishing Simulation at a Singapore Trading Company

October 04, 2026 | 15 min

Ten Employees Clicked the Fake Invoice: Phishing Simulation at a Singapore Trading Company

A composite scenario from Singapore: a 70-person trading company runs its first phishing simulation almost as an afterthought, and ten people click a fake supplier invoice in a single afternoon. How to read a first click-rate, why zero reports is a worse signal than ten clicks, and why the programme — not the platform licence — is the thing that changes outcomes.