These figures include demonstration data.

Cyber Behaviour Benchmark

Belgium. This is the live view: it changes as people complete the scan, so it is not for quoting.

The question, exactly as 2,719 people saw it

Select the domain name (the “main website”) in this link:
scam.my-bank
11%
scam.my
12%
bank.com
12%
my-bank.com correct
42%
com/file
11%
I don't know how to read a link
11%
The full spread of answers, not just right and wrong. 11% chose "I don't know how to read a link", which is a different group from the people who confidently picked a wrong answer: one needs teaching, the other needs correcting. Everyone answered in their own language; the English wording is shown here.

What a participant was told

The feedback shown after answering, verbatim:
A link's true destination is its domain name. Attackers put trusted brand names elsewhere in the link to look legitimate. To find the domain, locate the first single / and read the two dot-separated parts to its left: here that is my-bank.com, not “scam”.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.

Where it is weakest

Share who got it wrong, by group. Only groups with enough people and enough organisations appear.
GroupAnswer wrongPeople
Financial services sector63%354
Healthcare sector63%221
Technology sector63%355
250 or more size63%1,204
Education sector62%326
Insurance sector61%200
Belgium, everyone58%2,719
10 to 49 size56%659
Professional services sector55%389
Public sector sector52%92
50 to 249 size52%803
Manufacturing sector51%319
Other sector51%237
2 to 9 size50%34
Retail sector49%226
1 group held back: Just me. They are named rather than left out, so you can tell the difference between still gathering and never measured.
Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand