Campaign Builder
Compose a fully custom phishing simulation with a drag-and-drop editor — no template required. The Campaign Builder is where you build a bespoke lure from scratch: drag elements onto a canvas, edit them, choose who receives it, and AfriPhish wires up all the tracking, QR codes and landing pages for you.
An Enterprise feature. The Campaign Builder is included on the Enterprise plan. On other plans the entry point is hidden, and the API rejects a custom campaign with an upgrade prompt.
Opening the builder
From Phishing → Campaigns, click Builder (top right). The screen has three columns:
- Elements (left) — the palette of blocks you can add.
- Canvas (middle) — your email, assembled top to bottom.
- Inspector (right) — edit the selected block, set the campaign details, and choose recipients.
Building the email
Add an element by dragging it from the palette onto the canvas, or clicking it. Reorder by dragging blocks up or down. Select a block to edit its text, colours and links in the inspector; delete it with the trash icon. Toggle Preview at any time to see the rendered email exactly as a recipient will.
The palette covers everything a convincing message needs:
| Group | Elements |
|---|---|
| Branding | Company logo, heading, sub-heading |
| Content | Paragraph text, bulleted list, quote, two-column row, code box, signature |
| Data | Fillable table, key–value details table |
| Actions | Tracked link button, sign-in button, attachment / verification chip, generic QR code |
| Emphasis | Alert box, urgency banner |
| Layout | Divider, spacer, footer |
The action elements do the tracking for you
You never paste tracking URLs — the action blocks emit the right placeholders and the send pipeline fills them in per recipient:
- Tracked link / sign-in button → a per-recipient tracked link. A sign-in button drives the recipient to a (simulated) credential page.
- Attachment / verification chip → a tracked "open" that is recorded separately from a click.
- Generic QR code → a QR that always resolves to the recipient's tracked landing page. A scan counts as a click (quishing).
The capture mechanic
The builder infers the capture mechanic from the action elements you used (for example, a sign-in button implies credential capture), which decides how the landing page behaves. You can override it in the inspector if you want a specific outcome.
Choosing recipients
In the inspector's Recipients panel, search and select the exact people to target, or leave it empty to send to everyone active. The Department field narrows the audience further; selecting specific people overrides it. The campaign carries its recipients from the moment you create it.
Creating & launching
Fill in the campaign name, subject and sender, then click Create campaign. That saves it as a draft and opens the campaign detail page, where you review the recipient list and launch — immediately or spread over time — exactly like a template-based campaign. Every funnel signal (opened, clicked, attachment opened, credentials submitted, reported) is tracked and feeds each person's risk score.
Next: Automation & scheduling.