Today we are learning how to become digital detectives. We will explore how to spot scams, phishing emails, and fake websites to protect our personal information online. Let’s get started!
Phishing: An email or message from a fake source that looks real, asking you to log in or download something.
Malware: Bad software hackers use to spy on you if you click a dangerous link.
Rule of Thumb: Legitimate sites will never ask you to send your password via email. When in doubt, go directly to the website yourself instead of clicking the link!
Step 3: The Detective’s Checklist π΅ββοΈ
Before you trust a message or website, ask yourself these questions:
Does it look right? What is your first instinct? Are there spelling mistakes?
Is it free? Free offers usually aren’t really free!
Is it asking for personal information? Real businesses rarely ask for passwords or secrets over email.
Is it a chain email? Messages telling you to “forward this to everyone” can put people at risk.
Does the app look right? Fake apps often have sloppy graphics or very few reviews.
Is there fine print? Look for tiny text at the bottom. A “free phone” might actually cost you Β£120 a month in the fine print!
Step 4: Spot the Fake! π¨
Time to test your skills! Work through these 7 examples with your partner. Decide if they are REAL or FAKE, and explain your reasoning.
Phishing Detector Simulator
You will be shown 7 examples of websites, emails, and pop-ups. Use your Detective Checklist to figure out if they are real or a scam.
Example 1: Owl Cinemas Email
π https://mail.internaut.com/mail/u/0/#inbox
Subject: Important information about your membership
A big “Thank You” from Owl Cinemas for your Unlimited membership so far with us. We are writing to remind you that your initial 12-month membership with us is almost complete.
Because you’ve been such a loyal member, we’ll shortly be upgrading you to our premium membership at no additional cost!
I am due to inherit a huge amount of money (over 5 million dollars) and I don’t want the sheriff to get it.
You have always been a good friend to me so I want to keep the money in your bank account until after tax period. As a reward, I am willing to leave you 1 million dollar. Please send me your complete bank details so I can put this money in your account.
Your good friend for ever, Robin Loxley
A message asking for your bank details. Real or Fake?
Enter your credit card number below for 3 free sneakers of your choice.
Congrats! Enter your credit card to get 3 free sneakers! Real or Fake?
Excellent Detective Work! π΅οΈββοΈ
Review your results and the explanations below, then download your report.
1. Owl Cinemas Email: You guessed Truth: FAKE. It asks you to urgently click a link to update personal details, a classic phishing tactic.
2. Document Login: You guessed Truth: FAKE. The URL is misspelled as “intern4ut.com” with a ‘4’. This is a fake login page to steal passwords.
3. Donuts & More Shop: You guessed Truth: REAL. This is a normal store page showing products. There are no suspicious requests or weird URLs.
4. Robin Loxley Email: You guessed Truth: FAKE. This is a scam offering a huge reward in exchange for your bank details. Never share bank details via email.
5. Accounts Security Page: You guessed Truth: FAKE. The URL is very suspicious (“.com-genuine-login.com”). It is trying to steal your recovery info.
6. Phisher Games Pop-Up: You guessed Truth: FAKE. A giant pop-up creates false urgency to panic you into clicking a dangerous link.
7. Sneakerhead Land: You guessed Truth: FAKE. It claims you won a prize but asks for credit card details. Free items shouldn’t require payment info!
Final Score: / 7
Download your security report and paste it into your word document.
Step 5: Navigate the Reality River πΆ
Put everything you just learned into action inside Interland!
Your specific mission today is to travel to the Reality River. Watch out for phishers and learn how to cross the rapids by spotting what is real and what is fake.
Step 6: Log Off and Reflect π
Exit Ticket: Share with the class one specific clue you can use to tell if an email is a phishing scam.
Comments are closed, but trackbacks and pingbacks are open.