# Phishing Simulation Rate Calculator

> Turn phishing-test results into click rate, credential submission rate and report rate, all measured against delivered emails, plus reports per click.

Category: IT, networking & security · Applies to: Worldwide · Last updated: 2026-10-29
Interactive calculator: https://calculators.geekmidst.com/calculators/phishing-simulation-rate-calculator

Every rate here uses delivered emails (sent minus bounced) as the denominator, so campaigns of different sizes can be compared. A falling click rate and a rising report rate are both signs of progress.

Also called: Phishing click rate calculator.

## Inputs
- Emails sent (default 1000)
- Bounced or not delivered (default 20; optional)
- Recipients who clicked (default 98)
- Recipients who submitted data (default 29; optional)
- Recipients who reported it (default 147; optional)

## Results
- Click rate
- Data submission rate
- Report rate
- Clickers who submitted data
- Reports per click
- Delivered emails

## Formula

```
Delivered = Sent − Bounced;  Click rate = Clicked ÷ Delivered × 100;  Submission rate = Submitted ÷ Delivered × 100;  Report rate = Reported ÷ Delivered × 100
```

Where:
- Clicked, Submitted, Reported: unique recipients who did each action

## Worked example
1. Delivered = 1,000 − 20 = 980.
2. Click rate = 98 ÷ 980 = 10%; report rate = 147 ÷ 980 = 15%.
3. Submission rate = 29 ÷ 980 = 2.96%; reports per click = 147 ÷ 98 = 1.5.

**Result:** Of 980 delivered emails, 10% were clicked, 2.96% led to submitted data and 15% were reported.

## What the result means

Compare campaigns of similar difficulty only; a harder lure will raise the click rate without anyone getting worse. More reports than clicks (a ratio above 1) suggests people recognise and escalate phishing.

## Assumptions and limits
- Counts are unique recipients, not total clicks.
- Anyone who submitted data also clicked.
- Email security tools that pre-open links can register false clicks; remove them before calculating.

## Questions

### Why use delivered rather than sent emails?

Bounced emails never reached anyone, so counting them would make every rate look lower than it is.

### What is a good click rate?

There is no universal benchmark because lure difficulty varies so much. Track your own trend with comparable templates.

## Related calculators
- [Security Patch Compliance Calculator](https://calculators.geekmidst.com/calculators/security-patch-compliance-calculator)
- [Cybersecurity Risk Score Calculator](https://calculators.geekmidst.com/calculators/cybersecurity-risk-score-calculator)
- [Percentage Calculator](https://calculators.geekmidst.com/calculators/percentage-calculator)

Source: GM¹X CalcVerse — https://calculators.geekmidst.com/calculators/phishing-simulation-rate-calculator