Deepfake Campaign Guide

Overview

A deepfake campaign is a phishing campaign that directs targets to an AI Voicemail landing-page template. The landing page uses a ready voice profile to speak the message that you configure. The phishing email supplies the tracked link, the landing page supplies the playback experience, and the Campaign Wizard allows for the group(s) who receive the campaign, along with its schedule. 

Please contact the Support Team at support@phishingbox.com to inquire about this feature. 

Use the links below to move directly to the desired section:

• Before you begin
• Create and test a voice profile
• Create the AI Voicemail landing page
• Connect the landing page to a phishing email
• Create the campaign
• Target experience and tracking
• Troubleshooting
• Pre-launch checklist

Note: AI Voicemail access for the account is needed to conduct a Deepfake campaign. 

Before you begin

Prepare the following before you build the campaign:

• Authorization to use the selected speaker's voice in an approved security-awareness simulation.
• A clean recording from one speaker, or access to the speaker and a quiet room for the guided recording.
• An active group, or groups, to receive the phishing campaign emails. 
• A phishing email template containing a tracked {hook_url} or {hook_link} link.
• Follow our Deepfake Profile article to ensure that you have a ready-made deepfake. 

Tip: Use the Pilot option in the Campaign Wizard when you want to validate delivery and the recipient experience without including the campaign in account, group, or target metrics.

Create the AI Voicemail landing page

1. Open Templates > Create Template.
2. For Template Type, select Phishing Landing Page Template.
3. For Landing Page Method, select AI Voicemail.
4. Select Create.

Create a Phishing Landing Page Template with the AI Voicemail method.

In the Template Editor, build the visible page in the Body editor. The Header, CSS, and Code tabs provide additional control when required. The right-hand Phishing Landing Page Details & Settings panel identifies blocking errors and contains the AI Voicemail configuration.

1. Expand AI Voicemail.
2. Select a ready Voice Profile. If none is ready, select Create Voice Profile or return to Templates > Deepfake Profiles and wait for preparation to complete.
3. Enter the Voicemail Message. The field supports up to 250 words.
4. Use Insert Variable to personalize the spoken message with values such as {{fname}}, {{lname}}, {{company}}, {{manager}}, or {{date}}.
5. Select Preview Voice to listen to the configured message. This button is unavailable until a ready voice profile is selected.
6. Add one playback control to the landing-page body:
   • Select existing body text or an element and choose Attach to Selection to make that selection play the voicemail.
   • Choose Insert Button to add a dedicated play button.
   • Choose Insert Audio Player to add a standard audio player.
7. Complete the required template and page settings, including the template name and Page Title. Configure the completion thank-you message, locale, and other completion settings as needed.
8. Select the Save icon in the top-right of the Template Editor.

The AI Voicemail panel contains the message, variable, preview, and playback-control options.

The template editor will not save a usable AI Voicemail landing page while any of these blocking errors persist:

• The landing-page body is empty, 
• No ready voice profile is selected, or
• No play button/audio player has been added. 

Connect the landing page to a phishing email

Create or edit the phishing email at Templates > Create Template or Templates > Manage Templates.

1. In the email body, add the call to action that the target will select. Use {hook_url} as the URL or insert {hook_link}. The Portal replaces the variable with the tracked campaign link.
2. Expand Completion Settings.
3. Set Completion Options to Landing Page Template.
4. Select the AI Voicemail landing-page template that you created.
5. Select an appropriate Domain Name for the landing page.
6. Save the phishing email template.

Important: The Campaign Wizard selects the phishing email template, not the landing-page template directly. The email's Completion Settings connect the campaign to the AI Voicemail landing page.

Create the campaign

Open Tests / Campaigns > + Create Campaign. This will open the Campaign Wizard. 

Campaign Type

Select Phishing Campaign, then select Save & Next. AI Voicemail uses a phishing campaign because the target receives a simulated phishing email and follows its tracked link to the landing page.

Select Phishing Campaign on the Campaign Type step.

Schedule

• Enter a descriptive Campaign Name.
• Select one or more Group(s). When one group is selected, the Target Selection toggle can enable manual target selection; multiple groups use automatic selection and filtering.
• Optionally enable course auto-enrollment for failing targets or make the campaign a pilot.
• Choose a one-time or recurring frequency, the start date and time zone, how long to track activity, and the sending rate or distribution method.

Targets

If manual target selection is off, use Use Mathematical Auto Selection and Use Field Filters when you need a subset of the selected groups. If manual target selection is on, review the target table and use the available filter and selection controls.

Templates

1. On My Phishing Templates, locate the phishing email that is connected to the AI Voicemail landing page. The landing page itself is not selected here.
2. Select Add. If you use Template Library, select Get to copy a library template into the account and add it to the campaign.
3. Confirm that Templates Selected for Test shows the required number of templates.
4. Review Locales Needed, Selected Groups Locale Info, the campaign's default locale, and the selected template domain.

Review

Review domain authorizations, group and target totals, test timing, templates, notifications, Direct Delivery, image embedding, reply-body privacy, and advanced mail-server options. 

Select Finish only after these details are correct; Finish schedules or starts the campaign according to the configured start time.

Target experience and tracking

1. The target receives the selected phishing email.
2. The target selects the tracked {hook_url} or {hook_link}.
3. The Portal records the click and opens the configured AI Voicemail landing page.
4. The target selects the attached play element, inserted button, or audio player to hear the generated voicemail message.
5. Message variables are replaced with the target, group, campaign, or date values available for that recipient.

Use campaign and test reporting to review email delivery and recipient actions. The Sandbox is only a profile preview and does not record campaign activity.

Troubleshooting

No voice profiles appear

Open Templates > Deepfake Profiles and check the Status column. Only ready profiles appear in the Sandbox and AI Voicemail selector. If setup is required, ask an account administrator to activate the required provider integration.

Preview Voice or playback controls are disabled

Select a ready voice profile first. To use Attach to Selection, also select the text or element in the landing-page body that should act as the play control.

The editor still shows errors

Add content to the landing-page body, select a ready profile, and add a play button or audio player. Resolve every item in the red Errors panel before saving.

The template does not appear in the Campaign Wizard

Verify that you are looking for the phishing email template on My Phishing Templates. The AI Voicemail landing page is connected through the email's Completion Settings and is not selected directly in the wizard.

Personalization does not sound correct

Check the variable spelling and confirm that the corresponding target or group field contains data. Preview the base voice in the Sandbox and use concise, naturally punctuated sentences in the voicemail message.

Pre-launch checklist

• The voice profile is approved, prepared, and marked ready.
• The Sandbox playback sounds clear.
• The AI Voicemail landing page has body content, the correct profile and message, and a playback control.
• The phishing email contains a tracked hook link and selects the AI Voicemail landing page in Completion Settings.
• The campaign contains the correct target groups, schedule, sending method, phishing email template, locale, and domain.
• The Review step contains no unexpected authorization or delivery warnings.