Scams and cyber-fraud now drain more money from the world's citizens every year than the GDP of Switzerland. The United Nations calls the scam-center economy a threat to regional stability. National police forces report record losses year after year. This is no longer crime. This is a pandemic — and the first defense that works before the click is education.
Scams are now a global trust crisis. Citizens lost over $1.03 trillion in the broadest global estimate (GASA/Feedzai 2024); U.S. reported cybercrime losses hit a record $20.9 billion in 2025, up 26% in a single year (FBI IC3); and recovery remains rare — only ~4% of victims ever get their money back. The common failure point is human recognition: people do not identify the scam before they click, pay, or trust. ZelSafe turns scam awareness into a low-cost ($1.99 Citizen price), visual, gamified, 60-language, zero-data, on-device training system for citizens, employees, schools, and governments — deployable through the App Store in minutes, from the organization behind the ANAB-accredited, DoD 8140-approved RCCE program.
DATA NOTE: GLOBAL SCAM-LOSS ESTIMATES VARY BY SURVEY SCOPE, METHODOLOGY, COUNTRIES COVERED, AND REPORTING RATES. THIS REPORT USES THE 2024 GASA/FEEDZAI $1.03T ESTIMATE AS THE BROADEST GLOBAL CONSUMER-LOSS BENCHMARK; THE NARROWER 2025 GASA SURVEY (46,000 ADULTS, 42 COUNTRIES) REPORTED ~$442B WITH 57% OF ADULTS ENCOUNTERING A SCAM IN THE PAST YEAR. NEWER 2025 TREND DATA (FBI IC3, GASA) IS INCORPORATED WHERE AVAILABLE. REPORTED FIGURES UNDERCOUNT TRUE LOSSES, AS MOST VICTIMS NEVER REPORT.
These counters started the moment you opened this page. They are running at the world's actual, documented rates. While you read this document, this is what the criminals take.
Scam syndicates operate like multinational corporations: industrial scam centers in Southeast Asia, laundering networks across Africa and the Gulf, AI-generated phishing in every language, targeting every time zone at once. The map below is not a map of incidents. It is a map of everywhere.
Japan's National Police Agency reports record losses to social-media investment and romance fraud — on the order of ¥100+ billion in 2024 alone — layered on top of the long-running "special fraud" epidemic that targets the country's elderly with fake calls from "sons" and "officials." One of the world's most careful societies is losing at record pace.
Even after one of the world's most aggressive national anti-scam programs — bank delays, telco blocking, a National Anti-Scam Centre — Australians still lost roughly $2 billion in 2024. The lesson regulators drew: infrastructure helps, but losses only fall where citizen awareness rises.
UK Finance reports over £1.1 billion stolen through fraud in a single year — and fraud now accounts for around 40% of all recorded crime in England and Wales. In one of the world's great financial capitals, the single most common crime a citizen will experience is being scammed.
Industry association Bitkom estimates cyberattacks, sabotage and data theft cost German companies over €260 billion a year — roughly the GDP of Portugal, extracted annually from Europe's industrial engine. Phishing remains the number-one entry door.
France's national cyber-victim assistance platform is overwhelmed by phishing, fake bank advisors, and CPF training scams; across the EU, regulators warn that AI-written phishing in flawless French, German, Italian and Spanish has erased the broken-grammar warning signs citizens were once taught to look for.
Dubai Police and UAE banks run constant public warnings against a relentless wave of police-impersonation calls, fake bank alerts, delivery scams and crypto fraud targeting one of the world's most international, most banked populations — in a dozen languages at once.
Indian authorities logged cyber-fraud losses exceeding ₹22,800 crore in 2024 — with "digital arrest" scams so widespread that the Prime Minister warned the nation about them in a national address. Reported numbers are the tip: most Indian victims never file.
A nation of under six million people — among the most educated and digitally sophisticated on Earth — lost a record S$1.1+ billion in a single year. If it can happen in Singapore, it can happen anywhere. Singapore's response: treat scam education as national defense.
GASA estimates Vietnamese citizens lose the equivalent of 3.6% of national GDP to scams — one of the highest rates on Earth — as the country's rapid digitalization outpaces citizen awareness.
The worst-hit nation on the planet by share of income. Scams drain the equivalent of 4.2% of Pakistan's entire GDP every year — from families who can least afford to lose anything, with almost zero access to protection education in Urdu.
Kenya loses 3.6% of GDP; shopping and investment scams dominate across Kenya and Nigeria as mobile money adoption races ahead of awareness. Victims here report the highest emotional devastation in the world (GASA) — because the losses are life savings, not pocket change.
South Africa bleeds 3.4% of GDP; Filipino victims report among the deepest feelings of fear and vulnerability recorded in global surveys. Across the developing world the pattern repeats: the people losing the most are the people the security industry never built anything for.
Watch one country's official numbers over five years. The United States runs the world's most complete fraud-reporting system — and its curve is the shape of the whole world's problem.
Rich-world victims lose the most per person — the average American victim loses $3,520, the average Dane $3,067. But measured against what people actually have, the developing world is being economically bled.
The same criminal machine targets organizations — and the entry point is almost never the firewall. It is a human being who was never trained to recognize the attack.
And the burden does not fall equally. A Fortune 500 bank can spend half a million dollars a year on phishing simulations, security awareness platforms, and a dedicated training team. A 40-person accounting firm in Manchester, a family logistics company in Mumbai, a clinic in Nairobi, a school district in Ohio — they face the same attackers, with the same deepfakes and the same AI-written phishing, and they can afford none of it. Studies consistently show a large share of cyberattacks target small and mid-size businesses precisely because criminals know they are undefended — and for many small firms, one successful attack is an extinction event.
Documented, real-world cases. They happened to careful, intelligent, professional people — because modern scams are engineered to defeat intelligence. Only recognition defeats them.
A finance worker at global engineering firm Arup was invited to a video conference with his UK-based chief financial officer and colleagues. He recognized their faces. He heard their voices. He made 15 transfers as instructed. Every participant on that call was a deepfake. The company confirmed the fraud publicly.
Shan Hanes, CEO of Heartland Tri-State Bank in Kansas, was groomed by a long-con crypto investment scheme. Chasing his "returns," he embezzled $47.1 million and wired it to the fraudsters. The century-old community bank collapsed. He was sentenced to over 24 years in federal prison. If a bank CEO can be taken, anyone can.
The oldest scam on Earth, now supercharged by AI voice cloning that can imitate a grandchild from a three-second clip. The FBI recorded $7.7 billion lost by Americans over 60 in 2025 alone — up 59% in a single year, averaging $38,500 per victim. Behind that number: retirees handing gift cards to strangers, wiring life savings, losing fifty years of work in a single afternoon.
Romance scams follow a script investigators can recite: months of daily affection, a stolen profile photo, then the emergency — a medical bill, a customs fee, a frozen account. Victims lose money and are silenced by shame. Most victims worldwide never report, which means every statistic in this document is an undercount.
"Congrats on the role! First task: we'll send funds to your account — withdraw and forward them to our vendor, keeping 10%. Also buy your equipment up front." A money-mule and advance-fee scam in one message, aimed at students, graduates, and job seekers in distress. Some victims end up criminally liable for the money laundered through their accounts.
The UN estimates 220,000+ people have been lured by fake job ads into fortified scam compounds in Myanmar and Cambodia, held under threat of violence and forced to run romance and investment scams around the clock. Crackdowns in 2025 freed thousands from compounds like Myanmar's KK Park. This is what a trillion-dollar criminal industry looks like from the inside.
A coordinated global sweep against phishing, romance and investment fraud networks — one of the largest anti-fraud operations ever conducted.
A two-month continental operation against ransomware, business email compromise and online scam syndicates.
Multinational raids on industrial scam centers repatriated tens of thousands of trafficked workers and exposed a criminal economy the UN values at up to $37 billion a year in the region. When one compound falls, the syndicate relocates across a border within weeks.
Every investigator reaches the same conclusion: enforcement is essential — and it arrives after the money is gone. Only 4% of victims ever recover anything. You cannot arrest your way out of a trillion-dollar crime wave, and you cannot firewall your way out of an attack aimed at human trust.
The only defense that fires before the click is a human being who recognizes the scam on sight.
The security-awareness category was built around enterprise contracts, multi-seat pricing, simulations, dashboards, and annual procurement cycles. Platforms charge $10–$30 per employee per year, phishing-simulation programs stack on top, and large corporate programs routinely run $250,000 to $500,000+ a year. The result is brutal arithmetic: protection exists — for the payroll of a Fortune 500. Small businesses, schools, families, retirees, and entire nations are priced out.
In 24 months criminals added deepfake video calls, AI voice cloning, QR "quishing" on parking meters, fake toll texts, and AI-written phishing with perfect grammar in every language. The annual compliance module is obsolete before the auditor signs it. 31% of victims couldn't even tell if AI was used against them.
The mandatory annual module. Employees clicking through slides at 2x. A checkbox for the auditor. Completion rates look great; recognition rates don't move — because people learn to spot scams by seeing the actual scam message, repeatedly, in a format their brain enjoys, not by reading policy PDFs.
Pakistan, Kenya, Vietnam, Brazil, the Philippines — the hardest-hit populations on Earth. Now try to find scam education in Urdu, Swahili, Vietnamese, Portuguese or Tagalog. It barely exists. The industry publishes in English, for wealthy markets, at enterprise prices. Billions of people have literally no access to protection knowledge in their own language.
Not just the employees of companies that can afford half-a-million-dollar phishing-simulation programs. Everyone. The student getting her first job offer. The grandfather answering the phone. The shop owner in Lagos. The nurse in Manila. The new employee in Frankfurt. When recognition is universal, the scam economy's raw material — the untrained human — disappears.
For individuals, ZelSafe Citizen delivers full scam-recognition training on the phone for $1.99, forever: no ads, no subscription, no account, no portal, no tracking, no data collected. For organizations, users can optionally upgrade to ZelSafe Enterprise for $4.99 per user per year — less than the price of one coffee — to complete and earn the RCCS certification, learn SOC 2, HIPAA, and ISO 27000-family compliance requirements, and push their RCCS certificate and audit report to the ZelSafe Private Dashboard for compliance training completion management.
ZelSafe is not another detector that tells you a message was a scam after it arrives. It is a visual learning system that trains your eye to recognize every major scam pattern before you ever face it — the way pilots train in simulators before they fly.
At baseline, 33.1% of employees are susceptible to phishing. With security awareness training, susceptibility falls by over 40% in 90 days — and by up to 86% within a year. Awareness is not a soft measure. It is the single most effective defense ever measured against scams — and ZelSafe delivers it for $1.99.
Each card is a self-contained, beautifully illustrated lesson on one scam — how it works, the red flags, exactly what to do. Understood in 60 seconds, remembered for years.
See the actual text you'll receive — the fake Apple ID lock, the phony delivery fee, the "congrats on the remote role" money-mule pitch — word for word, before scammers send it to you.
Quick Quiz, Category Quiz, the 50-question Cyber Safety Challenge. Badges, 16-category mastery tracking, the ZelSafe Master award. Learning that feels like a game sticks.
A fresh scam card every day, audio narration on the go, video content — a complete multi-format curriculum in your pocket.
Scams evolve monthly — so does ZelSafe. New cards, new AI-threat briefings, new audio and video, continuously. Your protection never goes stale.
Lessons, scam examples, audio, training flow, and UI are in the user's own language. This is native learning, not a translation gimmick.
ZelSafe teaches you. It does not track you. No accounts harvested, no behavior sold, nothing to breach. Privacy is the architecture, not a feature tier.
The organization behind the ANAB-accredited, DoD 8140-approved RCCE program — the team that trains professional cybersecurity engineers, now teaching every citizen.
Scammers localize instantly. ZelSafe does too. The lessons, scam examples, red flags, quizzes, audio, training flow, and interface are delivered in the learner's own language. Not a gimmick. Not English-first content with a label changed. Truly native scam education.
Security training has always looked like homework. ZelSafe looks like the best-designed game on your phone — because awareness only works if people want to open the app.
Every card is a piece of art — bold, colorful, cinematic. Scam education that people screenshot and share.
Quizzes, streaks, badges, mastery levels, the ZelSafe Master crown. Learning that feels like winning.
The same gorgeous experience in Urdu, Swahili, Hindi, Portuguese, Filipino, Arabic, Kazakh, Armenian, Serbian, Azerbaijani, Bulgarian — lessons, audio, scams, training, and UI in the language people actually think in.
Narrated cards for the commute, video briefings for the visual learner. A full curriculum in every format.
New scam cards, new AI-threat briefings, new audio and video — Rocheston ships updates monthly, forever.
Zero data collected, sent, or processed. Your learning is yours alone — nothing exists to be breached.
With ZelSafe Enterprise, users complete the lessons and earn the RCCS certification. No exams. No proctors. No surveillance portal. The training teaches the practical awareness and compliance skills corporate auditors expect for SOC 2, HIPAA, and ISO 27000-family programs.
All this for less than the price of coffee.$1.99 Citizen training. Optional $4.99/user/year Enterprise subscription. Zero data collection by ZelSafe.
Traditional security-awareness platforms were designed for corporate programs: sales calls, annual contracts, admin consoles, phishing simulations, integrations, and custom pricing. Those tools can be useful for large enterprises. But they were never designed to reach every employee, every family, every retiree, every student, and every citizen. ZelSafe uses a different model: app-based, visual, multilingual, zero-data scam-awareness education at a flat Citizen price of $1.99 per person. Organizations that need the Enterprise layer can add campaign management, reporting, phishing simulations, workforce-readiness tools, RCCS certification access, SOC 2 / HIPAA / ISO 27001-aligned training, employer audit reports, and compliance requirement mapping for $4.99 per user per year.
Here is what that costs on leading enterprise security awareness platforms — using published list pricing and independent procurement benchmarks for the category — versus ZelSafe Citizen at a flat $1.99 per employee. The optional Enterprise subscription is $4.99 per user per year for organizations that need management, reporting, certification access, compliance training, and audit-ready evidence.
This is a category-level pricing benchmark, not a feature-equivalence claim. Traditional platforms may include phishing simulations, admin consoles, integrations, and risk scoring. ZelSafe Citizen focuses on universal scam-awareness education, certificates, and simple deployment at the permanent $1.99 public price: no ads, no account, no portal, no tracking, and no data collected. ZelSafe Teams and Enterprise add the optional campaign, reporting, phishing simulation, workforce-readiness, RCCS certification access, SOC 2 / HIPAA / ISO 27001-aligned training, employer audit reports, and compliance requirement mapping for organizations at $4.99 per user per year.
And that's list-price theory. Independent procurement benchmarks of what real customers actually pay in this category show the average SMB contract runs into the high four figures per year, and the average enterprise contract into the high five figures per year — and most major platforms don't publish list prices at all: pricing sits behind sales calls, custom quotes, and annual contracts.
For employers, ZelSafe Enterprise lets users upgrade, complete, and earn the RCCS certification while learning SOC 2, HIPAA, and ISO 27000-family compliance requirements. Employees can push their RCCS certificate and audit report to the ZelSafe Private Dashboard, where employers track compliance training completion, workforce readiness, phishing simulations, and audit evidence. Employers can also verify RCCS credentials directly. Citizen remains the zero-data mobile app; Enterprise adds management without turning training into surveillance.
Nothing collected.
Nothing stored.
Nothing transmitted.
Nothing sold. Ever.
From the ZelSafe Privacy Policy: "You cannot breach data you never store. There is no ZelSafe database to be subpoenaed." No accounts. No identifiers. No analytics SDKs. No cloud. No server anywhere that has ever seen a single byte about your people. Deploy it in the most sensitive environments on Earth: your review focuses on the app binary, its App Store privacy label, and this policy — because on Rocheston's side, there is nothing there at all.
| COMPLIANCE / PRIVACY HURDLE | TYPICAL DATA-COLLECTING PLATFORM | ROCHESTON ZELSAFE — ZERO DATA |
|---|---|---|
| GDPR — Data Processing Agreement (DPA) | ✗Required. Weeks of legal negotiation before anyone trains. | ✓Not required. No personal data is processed on your behalf. |
| GDPR Art. 5 — Data minimization | ✗Managed by policy: collect, then promise to limit. | ✓Absolute. The fullest form of minimization: collect nothing at all. |
| GDPR — Subject access & deletion requests | ✗Build workflows, answer within 30 days, forever. | ✓Nothing to request. No data held. Delete the app = total, instant erasure. |
| CCPA / CPRA — "Do Not Sell or Share" | ✗Disclosures, opt-out links, broker audits. | ✓Nothing exists to sell or share. Ever. Architecturally. |
| Cross-border transfers (SCCs / Schrems II) | ✗Transfer-mechanism review for every region. | ✓No transfer exists. Data never leaves the device, so no border is ever crossed. |
| Data residency requirements | ✗Regional hosting negotiations, extra cost. | ✓Residency = your employee's pocket. Always in-country, by definition. |
| SOC 2 / ISO 27001 vendor audit | ✗Demand reports, review findings annually. | ✓Nothing to audit. No server of ours ever touches your people's data. |
| FedRAMP (US federal cloud) | ✗Cloud authorization — months to years. | ✓Doesn't apply. There is no cloud component to authorize. |
| Vendor security questionnaire | ✗300 lines, weeks of back-and-forth. | ✓Nearly every line: N/A. Zero-data architecture. One afternoon. |
| Third-party / vendor risk assessment | ✗Full TPRM cycle before purchase approval. | ✓Minimal surface. There is no data relationship to assess. |
| Breach notification (GDPR 72h, state laws) | ✗Joint incident-response planning with vendor. | ✓Cannot occur. You cannot breach data that was never stored. |
| Subpoena / legal hold on vendor data | ✗Vendor can be compelled to hand over records. | ✓No database to subpoena. There is nothing to compel. |
| Employee monitoring / EU works councils | ✗Activity tracking triggers consultation duties. | ✓No tracking. Nothing to consult about — learning stays with the learner. |
| COPPA — children under 13 | ✗Age gates, parental consent flows. | ✓No data from any user of any age. Safe for every classroom. |
| FERPA — student records | ✗Education-record controls and agreements. | ✓No education record is ever created on our side, transmitted, or held. |
| HIPAA-adjacent staff environments | ✗BAA discussions, data-flow mapping. | ✓No new data surface introduced. Hospitals deploy without a second thought. |
| Analytics & advertising SDKs | ✗Firebase, Meta, Mixpanel embedded — must be disclosed. | ✓Zero SDKs. No analytics, no attribution, no trackers, no pixels. |
| Sub-processor lists & change notices | ✗Ongoing monitoring of the vendor's vendors. | ✓No sub-processors. Nothing is processed, so nobody processes it. |
| Data retention & deletion schedules | ✗Policies to define, enforce, and prove. | ✓Retention lives only on the device. Delete the app — everything is gone, instantly. |
| Account credentials / SSO attack surface | ✗Logins, passwords, SSO integration = phishing target. | ✓No accounts. No logins. No credentials. The attack surface is zero. |
| Cloud misconfiguration / insider access | ✗A real, recurring cause of vendor breaches. | ✓Impossible. No cloud to misconfigure, no insider with anything to access. |
| TIME YOUR LEGAL TEAM SPENDS | MONTHS. EVERY YEAR. | ONE AFTERNOON. ONCE. |
Each employee installs ZelSafe on their iPhone — or you push it to every device at once through Apple Business Manager. No console. No onboarding project. No complex software. Simple as that.
On completion, each employee generates their certificate + audit log — with completion tracking: who, what, when — created entirely on their device, and sends it straight to the employer with one tap. You know exactly who completed, without deploying anything.
That is the full deployment: a download link in one email. While competitors are scheduling your first demo call, your people are already on card 12.
One average U.S. scam victim loses $3,520 (GASA 2024). That single loss equals the Citizen cost of protecting 1,768 people with ZelSafe. A 100-person company costs $199 total for Citizen training — under 6% of one average loss. If ZelSafe prevents one incident, ever, it has paid for itself roughly 17 times over.
Every CISO, ministry legal team, and procurement officer asks the same six questions. Here are the six answers — each one flowing directly from the zero-data architecture documented in the ZelSafe Privacy Policy:
Those certifications audit how a vendor protects customer data on its servers. ZelSafe has no servers touching your data — no personal data is processed anywhere. Enterprise can provide SOC 2 and ISO 27001-aligned training and audit evidence for employers; it is not a claim that the zero-data Citizen app itself holds those vendor certifications.
FedRAMP authorizes cloud services. ZelSafe has no cloud component — there is nothing to authorize. Your standard mobile-app vetting becomes the shortest review your security team has ever run: no accounts, no network transmission of personal data, no analytics SDKs to inspect.
A data processing agreement governs a vendor that processes personal data on your behalf. ZelSafe processes none. No DPA is required — this is data minimization (GDPR Art. 5) in its fullest possible form: collect nothing at all.
Zero. There is no ZelSafe database holding your employees' data to be breached, leaked, or subpoenaed. No cross-border transfer questions, no data-residency questions — no personal data ever crosses a network to us.
ZelSafe collects no personal information from any user of any age — architecturally. Schools, universities, and youth programs deploy with no children's-privacy or student-records exposure whatsoever.
Gladly — nearly every line gets the same answer: N/A, zero-data architecture, see Privacy Policy §7. What normally consumes a quarter of back-and-forth collapses into a single afternoon read.
Turn on Airplane Mode. Open ZelSafe. Everything works — every card, every quiz, every certificate — identically, forever. An app that never needs the network to function is an app that never exfiltrates anything. (Core training is fully offline; new monthly threat cards arrive through ordinary App Store updates.) No other security awareness product on Earth will invite you to run this test.
Picture the alternative first: a CISO evaluates platforms for three months, sits through vendor demos, negotiates a contract, waits for legal to review the data processing agreement, then runs a six-week IT rollout. Now picture ZelSafe:
$1.99 per employee for Citizen training. For 50 employees, that's $99.50 — less than the coffee run for one meeting. If the company wants enterprise management, RCCS certification, compliance training, and audit reporting, the optional Enterprise layer is $4.99 per user per year — less than one coffee a year.
Buy Citizen licenses through Apple Business Manager and push to every company iPhone via MDM — or simply tell the team "install it, expense the $1.99." Either way: deployed today, not next quarter.
Daily cards, quizzes, badges — five minutes a day, and it's genuinely fun. On completion, each employee earns a certificate and emails their completion report to HR.
For organizations that choose Enterprise, employees can push their RCCS certificate and audit report to the ZelSafe Private Dashboard. Leadership sees compliance training completion, workforce-readiness charts, employer audit reports, and SOC 2, HIPAA, and ISO 27000-family requirement mapping — with zero employee data leaving the device unless the employee shares the report.
And it never goes stale: Rocheston ships new threat cards, new AI-scam briefings, new audio and video every single month — so the workforce you trained in January still recognizes the scam invented in June. Immediate deployment. Continuous updates. This is how enterprise security awareness should have always worked.
The math, one more time: a 200-person company gets continuously updated, gamified, 60-language Citizen awareness with certificates for $398 total. If it wants the optional Enterprise subscription with management, reporting, phishing simulations, workforce-readiness tools, RCCS certification access, SOC 2 / HIPAA / ISO 27001-aligned training, employer audit reports, and compliance requirement mapping, the total is $998 a year. The industry-standard alternative at enterprise scale runs $250,000–$500,000 a year. That is not a discount. That is a different universe.
You are watching your citizens lose billions, year after year. You run awareness campaigns, TV spots, posters in the metro — and the losses keep climbing. Here is the simplest national cybersecurity policy ever written: put ZelSafe on every citizen's phone. Ask them to complete it. Done.
And your citizens will actually finish it — because ZelSafe doesn't feel like reading a government pamphlet. Nobody reads a book in ZelSafe. They watch stunning illustrations, listen to audio on the commute, play quizzes and challenges, collect badges, and get genuinely excited to learn the next scam. Beautiful, simple, elegant, modern — education that competes with social media for attention, and wins.
Dubai — it's ready in Arabic. Tokyo — Japanese. Bangkok — Thai. Hanoi — Vietnamese. Beijing — Chinese. Sixty languages, already built, already on the App Store. No localization project, no waiting.
Complete ZelSafe, earn a Cyber-Safe Citizen certificate — and attach a nudge: a small tax rebate, a transport voucher, a mobile-data top-up, an entry in a national draw. A $5 incentive to prevent a $3,520 loss is the best ROI in government.
Awareness training cuts scam susceptibility by up to 86% within a year. Every trained citizen is one less victim, one less police report, one less family destroyed — and monthly Rocheston updates keep the whole nation current on every new threat.
The scammers are already speaking your citizens' language. The syndicates are already targeting your payment rails. The losses already outrun your awareness budget. Every year you wait costs your people billions and costs your economy points of GDP. The fix is on the App Store today, in your language, for less than the cheapest thing your government buys.
What are you waiting for?
Rocheston's certification programs carry ANSI National Accreditation Board accreditation — the gold standard for certification bodies.
Rocheston's RCCE program is approved under the US Department of Defense 8140 directive, mapped to 16 DCWF cyber workforce roles.
The organization that trains professional cybersecurity engineers across 1,039 courses distills that knowledge into cards a grandmother can master.
Rocheston tracks the live threat landscape — new AI scams, deepfakes, attack waves — and ships them to your phone every month.
No — and it doesn't need to. ZelSafe is universal awareness education for every human in the organization. It complements phishing simulation, email security, and identity controls; for the 99% of organizations that can afford none of those, it is the defense that finally exists.
Because Citizen is 100% mobile, self-guided, visual, and zero-data. No ads, no accounts to host, no portal to maintain, no analytics to sell, no servers to run, no sales team to feed, no implementation project to staff. The cost structure of an app, with the content depth of a platform. Enterprise features are optional at $4.99 per user per year.
Completion evidence — certificate plus audit log (who, what, when) — is generated entirely on the employee's device and shared by the employee to HR with one tap. Rocheston never receives, hosts, or sees it. Proof without surveillance.
Enterprise lets users upgrade, complete, and earn the RCCS certification, learn SOC 2, HIPAA, and ISO 27000-family compliance requirements, and push their RCCS certificate and audit report to the ZelSafe Private Dashboard. Employers can track compliance training completion, workforce readiness, audit evidence, and requirement mapping for less than the price of a coffee per user per year — while ZelSafe still collects zero data.
Core training works fully offline, forever. New scam cards, AI-threat briefings, audio and video arrive each month through ordinary App Store updates — the same trusted channel as every app on the phone.
ZelSafe is on the iOS App Store today, in 60 languages across all supported App Store countries. For mixed fleets and national deployments, contact Rocheston about roadmap and licensing at rocheston.com/zelsafe.
Precision matters, so here it is: those approvals apply to Rocheston's RCCE certification program. ZelSafe is built by that same organization — the expertise is inherited; the accreditations belong to RCCE. We say it plainly because credibility is the product.
Scammers took $1.03 trillion last year because the world's citizens were never taught to see them coming. Enforcement arrives too late. Enterprise training never reaches the people. Recovery is a 4% lottery. The curve only goes up.
Recognition is the only defense that works — and for the first time in history, it costs less than a coffee.
Every child. Every parent. Every grandparent. Every employee. In their own language. For $1.99.
