Lectures fade. Practice sticks.

1. One-time education wears off.

In 2024, a federal advisory group reviewed the research on scam-prevention messaging. The findings were blunt: benefits of a scam-awareness class largely fade within about a month. Attendees of in-person tutorials performed no better than anyone else six months later. Retention persisted only when reminders kept coming. In-the-moment pop-up warnings? People click past them out of habit. One-and-done education is the standard response to elder fraud, and it demonstrably doesn't stick.

2. Safe experience is what changes behavior.

The same review found the most promising approach is letting people safely experience a scam — “delivering training messages when users click on links in fake phishing emails.” Psychologists call the enemy optimism bias: “it won't happen to me.” Statistics don't break it. A near-miss does. A University of Florida study sent simulated phishing emails to older adults' real inboxes over 30 days and found susceptibility was measurable, trainable — and predictive of real-world behavior. That's the entire Spry loop: safe experience → immediate coaching → repetition → measurable resilience.

3. The playbook is proven at massive scale.

Virtually every large company on earth trains employees with simulated phishing: fake the attack, coach whoever clicks, score the team, report to leadership. It's a multibillion- dollar industry — the category leader was acquired for $4.6 billion — because it works. Here's the strange part: that machine has only ever been pointed at office workers. The demographic losing the most money to these exact scams has never had a version built for them. IT professionals who run these tools at work literally post online asking where to get one for their own parents. Until now, the answer was “nowhere.”