Messages that ask for your passphrase

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. A message says: 'Your account will close today! Reply with your passphrase to keep it.' What should you do?

A Reply fast with your passphrase

B Do not reply and tell an adult

2. Which statement is true?

A A real company will never ask you to send your passphrase in a message

B A real company may ask for your passphrase if the message looks official

3. A message from a 'teacher' you do not recognise asks you to text your passphrase so they can fix your login. What is it?

A A helpful request

B A trick

4. A friend's account messages you: 'Send me your passphrase so I can borrow your game.' What is the safest choice?

A Keep your passphrase private and tell an adult

B Send it because they are your friend

5. You click a link and see a page that looks like your game login, but the message that sent you there said to act now. What could this be?

A A fake login page that steals your passphrase

B A safe page because it looks the same

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Your account will close! Send your passphrase now.		AA real teacher will never ask for your passphrase in a message, so it is still a trick.
2Please log in at fr33-gamezone-login.com		BA fake scare message that tries to rush you into giving away your passphrase
3A real company, teacher or friend will never ask you to send your passphrase in a message		Cif message asks for passphrase then it is a trick
4What to do instead: do not reply and tell a trusted adult		Ddo not reply; tell an adult
5Message: 'Your account will close.' Reply: 'My passphrase is blue-frog-kite-moon.'		ESending your passphrase in a reply gives it to the scammer. Never reply with it.
6Message from 'teacher': 'Send me your passphrase.' Plan: 'It is a teacher, so I will send it.'		FA link to a fake login page that tries to steal your username and passphrase

Definitions

Never send your passphrase

Fill in the Blanks

Complete each line of code by filling in the missing parts.

IF message asks for __________ THEN SAY "It is a trick" END IF

IF message asks for passphrase THEN _________() END IF

IF message says account will close THEN ___ "It is a trick" END IF

IF login page asks for passphrase ____ tellAdult() END IF

IF message asks for passphrase THEN tellAdult() ___ IF

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A msg ← "Send your passphrase"

B isTrick ← FALSE

C IF isTrick THEN

D DISPLAY "Do not reply"

Question 2

A msg ← "Account will close!"

B IF msg looks real THEN

C DISPLAY "It is a trick"

D DISPLAY "Tell an adult"

Question 3

A page ← "Login from a message"

B IF page has a logo THEN

C DISPLAY "Do not type it"

D DISPLAY "Tell an adult"

Question 4

A msg ← "Reply with passphrase"

B IF msg wants passphrase THEN

C SEND passphrase TO sender

D DISPLAY "Tell an adult"

Question 5

A canSend ← TRUE

B IF canSend THEN SEND it

C ELSE DISPLAY "Do not reply"

D DISPLAY "Tell an adult"

Answer Key

Messages that ask for your passphrase

Section A: Quick Questions

B — Do not reply and tell an adult

A — A real company will never ask you to send your passphrase in a message

B — A trick

A — Keep your passphrase private and tell an adult

A — A fake login page that steals your passphrase

Section B: Match the Pairs

Your account will close! Send your passphrase now. → A fake scare message that tries to rush you into giving away your passphrase

Please log in at fr33-gamezone-login.com → A link to a fake login page that tries to steal your username and passphrase

A real company, teacher or friend will never ask you to send your passphrase in a message → if message asks for passphrase then it is a trick

What to do instead: do not reply and tell a trusted adult → do not reply; tell an adult

Message: 'Your account will close.' Reply: 'My passphrase is blue-frog-kite-moon.' → Sending your passphrase in a reply gives it to the scammer. Never reply with it.

Message from 'teacher': 'Send me your passphrase.' Plan: 'It is a teacher, so I will send it.' → A real teacher will never ask for your passphrase in a message, so it is still a trick.

Section C: Definitions

Never send your passphrase — A real company, teacher or friend will never ask for your passphrase in a message. If one does, it is a trick. Do not reply. Tell an adult.

Section D: Fill in the Blanks

IF message asks for passphrase THEN
  SAY "It is a trick"
END IF

IF message asks for passphrase THEN
  tellAdult()
END IF

IF message says account will close THEN
  SAY "It is a trick"
END IF

IF login page asks for passphrase THEN
  tellAdult()
END IF

IF message asks for passphrase THEN
  tellAdult()
END IF

Section E: Spot the Error

B — A message that asks for your passphrase is always a trick, so isTrick should be TRUE, not FALSE.

B — Tricky messages can look very real. The check must be whether the message wants your passphrase: IF msg wants passphrase THEN.

B — Fake login pages can copy a real logo. A logo does not make a page safe. The check should be whether the page wants your passphrase.

C — You must never send your passphrase to someone who asks for it in a message. The line should be DISPLAY "Do not reply".

A — It is never safe to send your passphrase in a message. canSend should be FALSE so the program does not send it.