🎣 Worksheet: Phishing and scams

1. Mark ✅ or ❌

1. Never give your password, verification code, PIN or CVV by message or over the phone.
2. Open websites by typing the address yourself, or use the official app.
3. Don't let “your account will be closed” threats rush you.
4. Stop and think before you click, especially when a message is rushing you.
5. Don't open unexpected attachments (.zip, .exe, .apk).
6. Double-check another way (ring your friend, ask your teacher).
7. Check the sender's address and the link's domain.
8. Don't believe “free” offers of phones, money or in-game currency.

2. Choose the correct answer

1. What is the clearest sign of phishing?

   • A) The message has your name in it
   • B) The message urgently asks for your password or code
   • C) The message arrives in the morning
   • D) The message has a logo

2. The link is: instagram.com.verify-account.net. What is the real domain?

   • A) instagram.com
   • B) verify-account.net
   • C) com.verify
   • D) instagram

3. You've typed your password into a fake website. What is the most important first step?

   • A) Clear your browsing history
   • B) Change your password straight away on the official website
   • C) Wait and see what happens
   • D) Switch your phone off for a week

3. Think and write

1. What is phishing? Explain it in one sentence.

2. Write five signs that a message might be a scam.

3. Read the message: “Your account will be closed today! Click here to verify it.” Find two warning signs.

4. How can you check a notice from the “post office” without clicking the link?

5. Invent a scam message and underline in colour the warning signs you've put in it.

6. What do you do if you've clicked a scam link by mistake?

cyber.kren-ks.eu · Make cyber hygiene a habit