← ACARA Digital Technologies Years 7–8

Reporting and deleting a phishing message

For a suspected phishing message, do not click or reply. Report it to a trusted adult or the school, then delete it. If you clicked, change your password and tell an adult.

Part of: ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 24

Understanding Reporting and deleting a phishing message in ACARA Digital Technologies Years 7–8

What it does: Clicking can expose your account, so the fix is to change your password and tell an adult, which this code shows as two steps. Setting reply to False shows the rule do not reply: an answer, even a rude one, confirms to the attacker that someone is reading. Never click a link in a suspected phishing message. Report it first, then delete it. Deleting protects only you. Reporting lets the school block the sender and warn other students. A reply can confirm your address or number is real, which can lead to even more phishing messages. Anyone can be tricked. Telling an adult quickly limits the damage.

Common mistakes: You should never reply to a suspected phishing message. Replying tells the attacker your account is active. The line should be: report it to an adult. The report and delete steps should run when the message IS suspected phishing. The condition should be: if is_phishing(message):.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Reporting and deleting a phishing message to a class →

This module's key terms are also in a printable crossword (Modules 635–666) and word search (Modules 635–695).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

You get an email saying you won a free phone. It looks like phishing. What should you do?

Do not click. Report it to a trusted adult or the school, then delete itClick the link to check if the prize is real, then delete it

Matches

click(link) to see if the message is real

↓

Clicking the link to check it is unsafe. The link could install malware or open a fake login page. Report the message and delete it instead.

Applying

Meanings

Term

Report then delete

Meaning

For a suspected phishing message, do not click or reply. Report it to a trusted adult or the school, then delete it. If you clicked, change your password and tell an adult.

Practice

IF message is suspicious THEN

Testing

Gaps

(message)

Check Answer

Spots

2 do not click the link

3 reply to the sender

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. You get an email saying you won a free phone. It looks like phishing. What should you do?

A. Do not click. Report it to a trusted adult or the school, then delete it ✓

B. Click the link to check if the prize is real, then delete it

Never click a link in a suspected phishing message. Report it first, then delete it.

2. A message from an unknown sender asks for your password. Should you reply?

A. No. Do not reply, report it and delete it ✓

B. Yes. Reply and ask who they are first

Replying shows the attacker that your account is active and gives them a chance to trick you. Do not reply.

3. Your school email has a Report phishing button. When is it best to use it?

A. Only after you have replied to the sender

B. When you spot a suspected phishing message, before you delete it ✓

The report button warns the school so they can protect other students. Use it, then delete the message.

4. Which order is correct for handling a suspected phishing message?

A. Delete it, then forget about it

B. Report it, then delete it ✓

Reporting first helps the school block the attack and warn others. Then you delete the message.

5. You clicked a link in a phishing text and typed in your password. What should you do next?

A. Change your password and tell an adult ✓

B. Say nothing and hope nothing happens

If you already clicked, act fast. Change your password and tell an adult so the account can be secured.

Match the Pairs

Report phishing button → A tool in your email app that sends the suspicious message to the people who can check it and block it

Report then delete → Do not click or reply to a suspected phishing message: tell a trusted adult or the school, then remove it from your inbox

If you already clicked a link in a phishing message, change your password and tell an adult straight away → if clicked_link: change_password(); tell_adult()

Never reply to a suspected phishing message, because replying tells the attacker your account is real and active → reply = False

click(link) to see if the message is real → Clicking the link to check it is unsafe. The link could install malware or open a fake login page. Report the message and delete it instead.

delete(message) and tell nobody → Deleting without reporting leaves others at risk. You should report it to a trusted adult or the school first, then delete it.

Key Term

Report then delete

For a suspected phishing message, do not click or reply. Report it to a trusted adult or the school, then delete it. If you clicked, change your password and tell an adult.

Fill in the Blanks

1. if suspected: report(message) delete(message)

Hint: Type the function name for telling a trusted adult or the school about the message.

2. if suspected: report(message) delete(message)

Hint: Type the function name for the last step, which removes the message from your inbox.

3. doNot(click) doNot(reply) report(message)

Hint: Type the second action you must avoid, which means sending a message back to the sender.

4. if clicked: changePassword() tellAdult()

Hint: Type the function name for the step that secures your account after you clicked.

5. if clicked: changePassword() tellAdult()

Hint: Type the function name for getting help from a trusted grown-up after you clicked.

Spot the Error

Question 1

A if message looks suspicious:

B do not click the link

C reply to the sender

D delete the message

Line C — You should never reply to a suspected phishing message. Replying tells the attacker your account is active. The line should be: report it to an adult.

Question 2

A message = get_new_email()

B if not is_phishing(message):

C report(message)

D delete(message)

Line B — The report and delete steps should run when the message IS suspected phishing. The condition should be: if is_phishing(message):

Question 3

A if suspected_phishing:

B open_link()

C report_to_adult()

D delete_message()

Line B — Never open or click a link in a suspected phishing message. It could take you to a fake website or install malware. The line should be: leave_link_alone()

Question 4

A clicked = True

B if clicked:

C skip_password()

D tell_adult()

Line C — If you already clicked, the attacker may have your password. You must change your password, so the line should be: change_password()

Question 5

A step 1: do not click or reply

B step 2: report to an adult

C step 3: forward it to friends

D done

Line C — Forwarding a phishing message could trick other people. After reporting it, the correct step is: delete the message.

Student with a class code? Join your class →