What is phishing awareness versus running SET on strangers?

What this card says

What each one is

Phishing: fake emails or messages that trick people into giving passwords.

Phishing awareness: training staff to spot and report it.

SET (Social-Engineer Toolkit): a tool that can build fake login pages.

The line

Awareness training is defence (Blue team).

SET is only for your own lab, for learning.

Example

Good: a “Report phishing” button and a short training video for staff.

Not OK: sending fake login emails to coworkers without written permission.

Key rule

Any phishing test on real people needs clear written authorisation first.