Last updated: March 2026
PhishClub is a security awareness training platform. It lets organisations run internal phishing simulations — team members generate disguised links and share them with colleagues to build the habit of checking where a link goes before clicking it.
PhishClub does not send emails on your behalf. It generates links. How those links are delivered is entirely up to you and your team.
PhishClub is for organisations running internal security awareness programmes. By signing up, the account admin confirms they have appropriate authority to add users from their organisation and run simulations within it.
PhishClub is not intended for use against people outside your organisation. Using the platform to target individuals without their employer's knowledge or consent is a breach of these terms and may result in immediate account termination.
An organisation account is managed by one or more admins. Admins are responsible for adding users, managing access, and ensuring the platform is used appropriately within their organisation.
You are responsible for keeping your login credentials secure. If you believe your account has been compromised, contact us at support@phishclub.co.uk immediately.
New accounts include a 14-day free trial. A payment card is required to start — you will not be charged during the trial period. At the end of the trial your subscription begins automatically and your card will be charged for the first billing cycle.
You may cancel at any time during the trial and no charge will be made. If your trial period ends and your card cannot be charged, your account will be suspended. Your data is retained for 30 days after suspension, after which it may be permanently deleted.
PhishClub is billed monthly at £3 per user per month (VAT included). Billing covers all users with a status of active or invited. Disabled users are not charged for.
The number of billable users is calculated at the point of each monthly charge based on the current state of your account.
Payments are processed securely via Stripe. PhishClub does not store payment card details.
You can cancel your subscription at any time. Cancellation takes effect at the end of the current billing period — you retain access until then.
If a payment fails, we will retry once after three days and notify you by email. If the retry also fails, your account will be suspended until payment is brought up to date. We do not offer grace periods beyond this.
We aim to keep PhishClub available and working well, but we do not guarantee uninterrupted access. We are not liable for any loss or disruption caused by downtime, bugs, or service issues.
PhishClub provides tools for generating and disguising links. We cannot guarantee that those links will render or behave identically in every email client, messaging platform, or browser. If a link does not display as expected in a specific environment, that is outside our control.
To the fullest extent permitted by law, PhishClub's liability to you is limited to the amount you paid us in the three months preceding any claim.
You must not use PhishClub to harass, target, or deceive individuals outside the context of an authorised internal security awareness programme. You must not use the platform in any way that is unlawful or that could cause harm to others.
We reserve the right to suspend or terminate any account that we reasonably believe is being used in breach of these terms, without prior notice.
We may update these terms from time to time. If we make significant changes, we will notify account admins by email. Continued use of the platform after that notification constitutes acceptance of the updated terms.
These terms are governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.
Questions about these terms? Email us at support@phishclub.co.uk.