Identity Protection Lab: Lock Down Your Identity
Secure your email and passwords, freeze your credit, lock your phone number, then handle a phishing text, a breach notice and a fraudulent account. Each choice has a cost and a reason. Prefer to read first? Start with how to protect your identity online.
You are Maya Lindqvist. Your cousin Theo has just had a loan taken out in their name, and you decide to protect your own identity this weekend. Across 12 decisions you secure your email, passwords and phone number, handle a phishing text and a breach notice, and respond when someone uses your details. Everything here is fictional. Each call is scored 0 to 10, with the reason based on FTC, CISA, NCSC and IDCARE guidance. Credit-file rules differ by country, so check your own national agency.
This is the guided version: a yellow flash shows where to click and a bar says what to do. Switch to Free play any time.
GuidedPress the highlighted Start button. You can edit the names above first, or keep the samples.
Make it yours
Replace the sample names so the scenario and the debrief you export are about your organisation.
TL;DRWhat this lab is
5 points
- A scenario lab: a fictional person protects their identity online, from the email master key to a SIM-swap scare and a fraudulent account.
- You make 12 scored decisions: email, password manager, two-step verification, credit freeze, fraud alerts, SIM-swap protection, oversharing, phishing, documents, a breach notice, recovery and ongoing habits.
- The reasoning follows the FTC, CISA, the UK NCSC and Australia's Scamwatch and IDCARE. No product is named or favoured.
- Free to play. You get a final score and grade, a shareable scorecard and next-step links. A downloadable debrief is available with a paid plan.
- Defensive and educational only. Credit-file rules differ by country, so the lab points you to your national agency rather than promising anything.
Frequently asked questions
Is this connected to my real accounts?
No. The people are fictional and nothing connects to any account. Nothing you choose changes a real setting.
Where does the advice come from?
From the US Federal Trade Commission, CISA, the UK National Cyber Security Centre, Scamwatch and IDCARE. The blog checklist links each source.
Is a credit freeze free?
In the US, the FTC says there is no cost to place or lift a credit freeze and that it does not affect your credit score. Rules differ in other countries.
What should I secure first?
Your email. The NCSC says to give it a strong password you use nowhere else, because criminals can use your email to reach many other accounts.
How is it scored?
Each decision scores 0 to 10 and the final score is the share of the maximum. Every answer comes with a short reason, so you learn why a choice helps or hurts.
More security tools
The tools people use most on PlayCISO.
Catch injected instructions hiding in content your AI agent should only read.
Score your readiness against the first international standard for AI security threats.
Critical CVEs across 21 major vendors, month by month — and what the 2026 surge means.
Build an ordered ruleset, replay labelled packets and catch shadowed and any-to-any rules.
Self-assess all six Functions, from Govern to Recover, and see your weakest one.
Search 172 threat actors across Microsoft, CrowdStrike, Mandiant and community names.