# How to launch a phishing campaign?

## Before you start

Make sure the phishing module is set up and employees are synchronized. See [Phishing module setup](/prevention-tools/what-is-the-phishing-module/phishing-module-setup.md)

## Walkthrough

{% stepper %}
{% step %}

### Access the phishing module

1. Sign in to [Stoïk Protect](https://app.stoik.io)
2. Go to `Simulations` > `Campaigns`
3. Click `Create a campaign`

<figure><img src="/files/l6c2qlKHGAcSP0nNsa1I" alt=""><figcaption></figcaption></figure>

You will be guided through the campaign creation flow.
{% endstep %}

{% step %}

### Configure the campaign

<figure><img src="/files/J36JkOZ6re4YVZwjhSSE" alt=""><figcaption></figcaption></figure>

{% stepper %}
{% step %}

#### Name

Give your campaign a clear name to easily identify it later.
{% endstep %}

{% step %}

#### Rhythm

**Start date**

* By default, the campaign starts tomorrow
* You can edit the start date if needed

**Email delivery distribution**

Choose when phishing emails will be sent. Emails are distributed over time so employees don't receive them all at once (except when selecting `Immediately`).

* Immediately
* Within 24 hours
* Within 7 days
* Within 15 days
* Within 30 days

Each employee receives one email, sent at a different time within the selected period.

**Recurrence**

* End the campaign → One-shot campaign
* Repeat the campaign → Recurring campaign\
  This option is available only when the frequency is not set to `Immediately` or `Next 24 hours`.
  {% endstep %}

{% step %}

#### Audience

Choose who will receive the phishing emails. You can:

* Select all employees
* Select employees from one or more tenants
* Select employees from one or more groups
* Manually select individual employees

You can use the search bar to quickly find employees.
{% endstep %}

{% step %}

#### Templates

Choose the phishing content to use in the campaign:

* Select all templates
* Select specific templates
* Select specific scenarios within templates
* Combine scenarios from different templates

You can use the search bar to quickly find templates or scenarios.
{% endstep %}
{% endstepper %}
{% endstep %}

{% step %}

### Launch the campaign

1. Review your campaign configuration
2. Click `Start campaign`

The campaign is automatically saved as a `DRAFT` before being launched.

Your phishing campaign will start according to the configuration you selected.
{% endstep %}
{% endstepper %}

{% hint style="info" %}
You can run multiple phishing campaigns at the same time.\
Each campaign is managed independently and can target different audiences or use different scenarios
{% endhint %}

## What happens after launch?

* Phishing emails are sent through your email provider to ensure reliable delivery
* Employee interactions are tracked automatically
* Results are available in the Campaign dashboard

To learn how to analyze results, see [**Understanding phishing results and performance**](/prevention-tools/what-is-the-phishing-module/understanding-phishing-results-and-performance.md)

## Managing a campaign

You can pause a campaign at any time by going on the campaign > `Settings` > `Pause`.

Once paused, you can archive a campaign by going on the campaign > `Settings` > `Archive`.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.stoik.io/prevention-tools/what-is-the-phishing-module/how-to-launch-a-phishing-campaign.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.