This is a submission for the Gemma 4 Challenge: Build with Gemma 4
What I Built
"Forward or Fraud" is an immersive, gamified cybersecurity educational simulator disguised as a retro desktop operating system.
Players roleplay as corporate employees navigating a typical work week. Using a fully simulated workstation, they must manage their daily tasks, inspect incoming emails, analyze their contents, and make split-second decisions: Do they flag a threat, escalate it to IT, forward it, reply, or ignore it?
Every decision has real-time consequences. Players must balance critical corporate metrics—including Security, Financial Stability, Corporate Reputation, Manager Trust, and Coworker Relationships across a multi-day campaign. At the end of their shift, a comprehensive Evaluation Report analyzes their decisions, pointing out exactly what they missed and what they successfully protected.
- Fully Simulated Desktop Environment: An interactive mock OS built entirely in the browser, featuring flexible windows, custom taskbars, sticky notes, a media player, and a simulated web browser.
- Multi-Channel Threats: Scams aren't limited to emails. Players experience multi-layered attacks, such as receiving a suspicious email that links to a fake tracking portal, or an attachment from an urgent email that turns out to be malicious executable.
- Branching Narrative & Choices: Players can Flag (mark as scam), Forward, Reply, Escalate to IT (which triggers a follow-up conversation with IT support), or Ignore the item.
- Dynamic Corporate Metrics: Actions dynamically impact multiple game state variables. Flagging a legit email hurts relationship scores, while clicking a phishing link leads to catastrophic financial or security drops.
- Intelligent Scenario Randomizer: In addition to hand-crafted, story-driven scenarios scheduled for specific days, the game features a dynamic day-based randomization engine that blends random noise, phishing, and legitimate tasks to keep gameplay unpredictable.
Demo
https://fraud.trysomething.fun
Code
https://github.com/JerrellT/learn-detect-scam
How I Used Gemma 4
I initially planned to use gemma-4-E4B-it to enable full offline functionality, including unique, system-generated scenarios for each player. However, because Gemma 4 models have not yet been adapted for WebGPU, and considering that this is a browser-based application with limited client-side storage, I instead chose to use gemma-4-26b-a4b-it for scenario generation inside the Scenario Builder interface. The model's strong reasoning capabilities and support for structured JSON returns make it a perfect fit for this project. In fact, the majority of the scenarios in this version were generated by Gemma in a single shot.
Top comments (0)