Why demonstration works
People overestimate their ability to spot a fake screen. Shown a realistic wallet interface with a live chart and current prices, most trainees rate it as genuine, and that gap between confidence and accuracy is the thing worth teaching.
Building the screen in front of the room in under a minute makes the point better than any slide. The takeaway is not that this particular fake was convincing; it is that visual assessment is the wrong test entirely.
Teach verification, not detection
Detection training ages badly, because interfaces change and fakes improve. Verification does not. A cryptocurrency transaction either exists on a public ledger or it does not, and checking that is independent of how convincing the screenshot was.
Give trainees a rule they can apply under pressure: never treat a screen as evidence, look the transaction up yourself on a public block explorer, and confirm funds have arrived in an account you control before doing anything irreversible.
- A screenshot is never evidence of payment
- Look the transaction up on a block explorer yourself
- Confirm arrival in an account you control
- Urgency to skip verification is itself the warning sign
Running the session safely
Use a dedicated device with no real wallet on it. Label every screenshot you produce as simulated at the moment you create it, before it can be separated from its context, and do not circulate unlabelled captures in course material.
Keep the material generic. Building a demonstration around a named real person or company turns a training exercise into something that can be misused, and the teaching point does not require it.
Where the boundary is
Training material is a permitted use. Producing screens that are then used to deceive anyone is not, and that includes unannounced tests on people who have not consented to being tested.
If your organisation runs simulated-phishing style exercises, route this through whoever governs that programme rather than improvising it. The consent and disclosure requirements are the same ones that apply to any deception-based exercise.
Frequently asked questions
Is this an appropriate teaching tool?
Yes. Scam-awareness and security education is an explicitly permitted use under our Acceptable Use Policy.
What should trainees do instead of trusting a screenshot?
Look the transaction up on a public block explorer themselves, and confirm the funds have arrived in an account they control.
Can I put the screenshots in course material?
Yes, provided each one is clearly labelled as simulated so it cannot be separated from that context later.
Can I use it for an unannounced staff test?
Not without going through whoever governs deception-based exercises in your organisation. Consent and disclosure rules apply.