Reporting and deleting a phishing message

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. You get an email saying you won a free phone. It looks like phishing. What should you do?

A Do not click. Report it to a trusted adult or the school, then delete it

B Click the link to check if the prize is real, then delete it

2. A message from an unknown sender asks for your password. Should you reply?

A No. Do not reply, report it and delete it

B Yes. Reply and ask who they are first

3. Your school email has a Report phishing button. When is it best to use it?

A Only after you have replied to the sender

B When you spot a suspected phishing message, before you delete it

4. Which order is correct for handling a suspected phishing message?

A Delete it, then forget about it

B Report it, then delete it

5. You clicked a link in a phishing text and typed in your password. What should you do next?

A Change your password and tell an adult

B Say nothing and hope nothing happens

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1Report phishing button		Aif clicked_link: change_password(); tell_adult()
2Report then delete		BDo not click or reply to a suspected phishing message: tell a trusted adult or the school, then remove it from your inbox
3If you already clicked a link in a phishing message, change your password and tell an adult straight away		CDeleting without reporting leaves others at risk. You should report it to a trusted adult or the school first, then delete it.
4Never reply to a suspected phishing message, because replying tells the attacker your account is real and active		DClicking the link to check it is unsafe. The link could install malware or open a fake login page. Report the message and delete it instead.
5click(link) to see if the message is real		Ereply = False
6delete(message) and tell nobody		FA tool in your email app that sends the suspicious message to the people who can check it and block it

Definitions

Report then delete

Fill in the Blanks

Complete each line of code by filling in the missing parts.

if suspected: ______(message) delete(message)

if suspected: report(message) ______(message)

doNot(click) doNot(_____) report(message)

if clicked: ______________() tellAdult()

if clicked: changePassword() _________()

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A if message looks suspicious:

B do not click the link

C reply to the sender

D delete the message

Question 2

A message = get_new_email()

B if not is_phishing(message):

C report(message)

D delete(message)

Question 3

A if suspected_phishing:

B open_link()

C report_to_adult()

D delete_message()

Question 4

A clicked = True

B if clicked:

C skip_password()

D tell_adult()

Question 5

A step 1: do not click or reply

B step 2: report to an adult

C step 3: forward it to friends

D done

Answer Key

Reporting and deleting a phishing message

Section A: Quick Questions

A — Do not click. Report it to a trusted adult or the school, then delete it

A — No. Do not reply, report it and delete it

B — When you spot a suspected phishing message, before you delete it

B — Report it, then delete it

A — Change your password and tell an adult

Section B: Match the Pairs

Report phishing button → A tool in your email app that sends the suspicious message to the people who can check it and block it

Report then delete → Do not click or reply to a suspected phishing message: tell a trusted adult or the school, then remove it from your inbox

If you already clicked a link in a phishing message, change your password and tell an adult straight away → if clicked_link: change_password(); tell_adult()

Never reply to a suspected phishing message, because replying tells the attacker your account is real and active → reply = False

click(link) to see if the message is real → Clicking the link to check it is unsafe. The link could install malware or open a fake login page. Report the message and delete it instead.

delete(message) and tell nobody → Deleting without reporting leaves others at risk. You should report it to a trusted adult or the school first, then delete it.

Section C: Definitions

Report then delete — For a suspected phishing message, do not click or reply. Report it to a trusted adult or the school, then delete it. If you clicked, change your password and tell an adult.

Section D: Fill in the Blanks

if suspected:
    report(message)
    delete(message)

if suspected:
    report(message)
    delete(message)

doNot(click)
doNot(reply)
report(message)

if clicked:
    changePassword()
    tellAdult()

if clicked:
    changePassword()
    tellAdult()

Section E: Spot the Error

C — You should never reply to a suspected phishing message. Replying tells the attacker your account is active. The line should be: report it to an adult.

B — The report and delete steps should run when the message IS suspected phishing. The condition should be: if is_phishing(message):

B — Never open or click a link in a suspected phishing message. It could take you to a fake website or install malware. The line should be: leave_link_alone()

C — If you already clicked, the attacker may have your password. You must change your password, so the line should be: change_password()

C — Forwarding a phishing message could trick other people. After reporting it, the correct step is: delete the message.