Skip to main content
A video call campaign does not phone anyone. The console says: “Email the employee a meeting link. They open our meeting page and see the caller on video, a rendered face speaking in the cloned voice, running the same pretext as a phone call. The reveal and teaching message are shown and spoken at the end.”
The reveal is always on for a video call. It cannot be switched off. A video campaign cannot start until someone is named as having agreed that staff may be shown a rendered face.

​
Before you start

  • An attacker with a cloned voice. The face speaks in that voice. See Create an attacker.
  • The people to invite, with an email address, and a phone number if you also want a text. See Add the people you will call.
  • The name of the person who agreed that video calls are in scope, and the date.

​
Steps

1

Choose Video call

Open Red Team, Campaigns, New Campaign. Under Step 1 · Choose how to run it, pick Video call.
2

Choose who the caller looks like

Under Who the caller looks like, pick a face. The help text: “Pick a stock face we ship, or an executive face recorded with consent. A stock face is never named as a real colleague without the customer’s written say-so.”A stock face only appears once DeepBlocker has registered it on the face service. A consented executive face appears here once the executive has recorded consent.
3

Write the invitation

Under Invitation message, edit the short message that carries the link. It uses the same rules as a warm-up notice: it may name the person and their own company, never an outside brand, and {link} is replaced with the meeting link. The three starting templates are Quick call, IT check and HR document. See Every message DeepBlocker sends to your staff.
4

Confirm the scope

Tick Video calls are in scope for this test. A field appears. Name who agreed, for example “agreed with the Head of Security on 11 October”. The campaign cannot start without this.
5

Pick the scenario and finish the wizard

Pick a campaign template, then the attacker, the people, the timing and the authorisation, as for a single call. See Build a campaign and Authorise and launch.

​
What the person receives

An email with the meeting link, and a text when they have a phone number. The link works once and expires 72 hours after it is created. A dropped connection can rejoin while the call is live. The meeting page says Join the call with and the caller’s name. “Your microphone will be on. You can turn your camera on if you like.” The person clicks Join call. They see the caller’s face large and their own camera small, with mute, camera and leave buttons. At the end of a failed call, a card titled This was a security awareness test appears on screen. A neutral voice speaks the same teaching message. When you set a training link, the card adds Open the short training. When the call ends the page says The call has ended. You can close this page.

​
What happens next

The campaign page shows a sentence first, for example “3 of 8 invited employees joined the video call. 1 person gave something away to the face on screen.” Each call is then graded like a phone call. See Read your results.

​
Using an executive’s own face

The executive receives a one-use link to a consent page titled Consent to a copy of your face. The link is good for 7 days. The page shows five points in plain words: what the copy is, what it is used for, what is stored, how to withdraw, and who to contact. The executive ticks I have read the five points above and I agree. They record 3 to 10 seconds of video, saying the consent sentence aloud. Then they click Give my consent and submit. From the same link they can later click Withdraw my consent. The copy is deleted at the video service and every test that uses it is stopped. The consent recording is kept as the record of what was agreed and when it was withdrawn. A workspace may hold three executive faces by default.
A cloned voice needs its own consent, separately from the face. See Clone an executive’s voice with consent.

​
Problems

The stock faces are registered by DeepBlocker. Write to us, or use a consented executive face. See Support and contact.
The link expired after 72 hours, the call has already ended, or the link was copied wrongly. Run the campaign again for that person.
Tick Video calls are in scope for this test and write who agreed in the field under it. A face must also be picked.