These figures include demonstration data.

Cyber Behaviour Benchmark

Belgium. This is the live view: it changes as people complete the scan, so it is not for quoting.

The question, exactly as 3,832 people saw it

Select the domain name (the “main website”) in this link:
scam.my-bank
12%
scam.my
12%
bank.com
12%
my-bank.com correct
40%
com/file
12%
I don't know how to read a link
12%
The full spread of answers, not just right and wrong. 12% chose "I don't know how to read a link", which is a different group from the people who confidently picked a wrong answer: one needs teaching, the other needs correcting. Everyone answered in their own language; the English wording is shown here.

What a participant was told

The feedback shown after answering, verbatim:
A link's true destination is its domain name. Attackers put trusted brand names elsewhere in the link to look legitimate. To find the domain, locate the first single / and read the two dot-separated parts to its left: here that is my-bank.com, not “scam”.
The workgroup wrote these. Showing them beside the national result is how the questionnaire stays theirs.

Where it is weakest

Share who got it wrong, by group. Only groups with enough people and enough organisations appear.
GroupAnswer wrongPeople
Education sector66%329
Just me size66%32
Technology sector63%428
Professional services sector62%486
Manufacturing sector62%488
2 to 9 size62%55
Other sector61%352
50 to 249 size61%1,251
Belgium, everyone60%3,832
Healthcare sector60%402
Public sector sector60%192
250 or more size60%1,886
Insurance sector58%416
10 to 49 size58%608
Retail sector54%410
Financial services sector52%329
Get a report of your own, and for organisations in Belgium see how yours compares on this. Free, about six minutes per person.See where you stand