To build a scenario from a real email you received, open a scenario's Email step and use the Start from a real-world email panel.
1 – Objectives
Turn a real-world email into a ready-to-edit phishing scenario draft
Save time compared to building an email from scratch
Increase the variety of your scenario library with contextualized, realistic threats
2 – Prerequisites
Admin permissions to edit scenarios
A duplicated scenario, with the Scenario Details step already completed
A real-world email available as a file (.eml, .emlx, .msg) or accessible from your mailbox
3 – Open the import option
3.1 – Access the Email step
From a scenario's
Emailstep, locate theStart from a real-world emailpanel, next to the HTML Builder and AI Builder options
3.2 – Launch the import window
Click
Import from emailto open theCreate from an emailwindow
4 – Choose an import method
Two methods are available:
Method | How it works |
Upload an email file | Choose an .eml, .emlx, or .msg file. Arsen copies over the sender, subject, and content. |
Forward an email to Arsen | Forward the original email from your mailbox to a dedicated import address. |
4.1 – Upload an email file
Click the
Upload an email filepanelSelect an .eml, .emlx, or .msg file from your computer
Everything can be reviewed and edited before saving
4.2 – Forward an email to Arsen
Copy the dedicated forwarding address shown in the window (e.g.
[email protected])Forward the original email to this address from your mailbox
Keep the import window open — Arsen detects the email automatically
5 – Track the import progress
Once an email is sent or uploaded, the import runs through three stages:
Waiting – Arsen is waiting for your email
Creating draft – Arsen is turning the email into an editable draft
Ready – the draft is available for review
ℹ️ Note
Keep the import window open until the process reaches the Ready stage.
6 – Review and finalize the draft
Once the draft is ready, review and edit the sender name, sender email, subject, and body like any other scenario
Add tokens, Red Flags, and a sending domain as needed (see Editing a Phishing Email)
7 – Why use this feature
Speed – build a scenario in minutes instead of writing an email from scratch
Variety – expand your scenario library with real, contextualized threats, so employees learn to recognize genuine warning signs rather than the pattern of a simulation
Ease of use – no technical skills required: upload or forward, then edit
8 – Recommendation
📚 Note
Importing a real email does not guarantee strong campaign results on its own. Reinforce it with classic social-engineering triggers — a sense of urgency, curiosity, or an authority argument, for example.