181 views
Photo by Markus Winkler on Pexels

Over 30% of employees open phishing emails, higher than global average

Internal communication phishing emails had the highest click rate.

The results of Singapore's first coordinated phishing exercise held as part of Exercise SG Ready (ESR) 2025 have revealed that more than 30% of the phishing emails were opened and 17% of the recipients clicked the phishing link, 8% higher than the average global phishing rate.

This suggests that a significant number of employees may be susceptible to real-world phishing attacks.

Additionally, approximately 5% of employees reported a phishing attempt, which is 13% lower than the global industry reporting rate of 18%.

According to the Singapore Business Federation (SBF), this underscores the need for enhanced security awareness and reporting protocols.

The click rates between large companies and SMEs were closely tied, indicating that both large and small companies are equally susceptible to phishing attacks.

Amongst the different types of phishing emails sent, those on internal communications garnered the highest click rate, suggesting that employees generally were less guarded about the authenticity of emails claiming to originate from within the organisation.

Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

If you've been wondering whether SBR could work for your company — yes, probably.

A lot of the companies we partner with started as readers. They'd been following our coverage for a while, saw their own customers and competitors in it, and eventually asked the obvious question: could we do something with you? The answer is usually yes. The shape of it depends on what you're trying to do.


The options are broader than most people assume — thought leadership articles, sponsored content, industry summits across Southeast Asia, regional awards programmes, podcasts, and media placements in print and digital. Some partners use one channel; most use a mix. We figure out the right combination by starting with your brief, not with our rate card.


So if the question has been on your mind, here's the easy way to ask it.

We'll tell you honestly whether we can help, and how. It's a better use of everyone's time.