← ACARA Digital Technologies Years 9–10

Pretexting

Inventing a believable story or fake identity, like IT support or a delivery driver, to build trust and talk someone into handing over information or access.

Part of: ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 31, WA Computer Science ATAR Year 11 — Cyber Security — Module 43

Understanding Pretexting in ACARA Digital Technologies Years 9–10

What it does: A believable delivery story gets a helpful person to give physical access to a building they should not enter. The friendly small talk makes the target comfortable so the request for information seems normal. Pretexting is all about the made-up story (the pretext). The attacker uses it to build trust and make the ask seem reasonable. Real IT support does not need your password. A fake IT identity is a classic pretext. Check the identity yourself using a trusted contact method. Never rely on details the caller gives you. Uniforms and stories are easy to fake. Attackers use them to look like they belong so that people let them in.

Common mistakes: A single = assigns a value, so it cannot be used to test a condition. The comparison needs ==: if trust_built == True:. The string is missing its closing quote. It should be attack_type = "pretexting".

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Pretexting to a class →

This module's key terms are also in a printable crossword (Modules 743–781) and word search (Modules 743–809).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which best describes pretexting?

Sending thousands of identical emails with a dodgy link in themInventing a believable story or identity to talk someone into giving up information or access

Matches

"The caller knew my name and said he was from IT, so I gave him my password."

↓

Trusting a caller just because they sound official and know some details. Attackers can research names, so the identity must be checked first, for example by hanging up and calling the real IT help desk.

Applying

Meanings

Term

pretexting

Meaning

Inventing a believable story or fake identity, like IT support or a delivery driver, to build trust and talk someone into handing over information or access.

Practice

SET story TO "I am from IT support"

Testing

Gaps

= "IT support"

Check Answer

Spots

2goal = "get the password"

3if trust_built = True:

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which best describes pretexting?

A. Sending thousands of identical emails with a dodgy link in them

B. Inventing a believable story or identity to talk someone into giving up information or access ✓

Pretexting is all about the made-up story (the pretext). The attacker uses it to build trust and make the ask seem reasonable.

2. A caller says, 'Hi, I'm from the school IT help desk. I need your password to fix your account.' What is this?

A. Pretexting: the caller is pretending to be IT support ✓

B. Normal practice: IT support always asks for passwords

Real IT support does not need your password. A fake IT identity is a classic pretext.

3. Which is the safer response to the 'IT support' caller?

A. Hang up and contact IT using the number on the school website ✓

B. Give the password so the problem gets fixed faster

Check the identity yourself using a trusted contact method. Never rely on details the caller gives you.

4. A stranger in a delivery uniform says, 'I have a parcel for the office, just let me in the back door.' Which is a pretext?

A. The delivery driver story is made up to get past the door ✓

B. The uniform proves the person is a real delivery driver

Uniforms and stories are easy to fake. Attackers use them to look like they belong so that people let them in.

5. Why do pretexters often chat in a friendly way or share small facts before they ask for anything?

A. Because they have no plan and are making small talk

B. To build trust so the final request feels normal ✓

Building trust before the ask is part of the plan. A friendly, believable chat lowers your guard.

Match the Pairs

pretexting → Inventing a believable story or fake identity to talk someone into handing over information or access

"Hi, it's Sam from IT. Please read me your password." → Pretending to be IT support to get a login

Pretending to be a delivery driver to get through a locked door → "Parcel for Level 3! Can you buzz me in?"

Building trust before the ask: chatting first, then requesting information → "Loved your school's sports day! By the way, what's your student ID?"

"The caller knew my name and said he was from IT, so I gave him my password." → Trusting a caller just because they sound official and know some details. Attackers can research names, so the identity must be checked first, for example by hanging up and calling the real IT help desk.

"The delivery driver seemed friendly, so I let him walk into the office alone." → Letting a friendly stranger in without checking their identity or reason. Friendliness is how trust is built, so visitors should be verified and escorted.

Key Term

pretexting

Inventing a believable story or fake identity, like IT support or a delivery driver, to build trust and talk someone into handing over information or access.

Fill in the Blanks

1. pretext = "IT support"

Hint: Type the variable name that holds the invented story an attacker uses to gain trust.

2. trust = 0 for step in range(3): trust += 1

Hint: Type the operator that adds to trust each time the attacker is friendly before asking.

3. if trust > 2: print("Can you confirm your password?")

Hint: Type the keyword that makes the ask happen only once enough trust has been built.

4. is_verified = False if not is_verified: print("Hang up and call back")

Hint: Type the variable name that tracks whether the caller's identity has been checked.

5. fake_role = "delivery driver" print("I am a " + fake_role)

Hint: Type the variable name that stores the false identity the attacker pretends to have.

Spot the Error

Question 1

A caller = "IT support"

B goal = "get the password"

C if trust_built = True:

D victim_gives_info = True

Line C — A single = assigns a value, so it cannot be used to test a condition. The comparison needs ==: if trust_built == True:

Question 2

A attack_type = "pretexting

B fake_role = "delivery driver"

C print(attack_type, fake_role)

Line A — The string is missing its closing quote. It should be attack_type = "pretexting"

Question 3

A def intro(name):

B return "IT here, " name

C msg = intro("Sam")

D print(msg)

Line B — The fake IT introduction and the name must be joined with +. It should be return "IT here, " + name

Question 4

A role = "delivery driver"

B story = "I am a " - role

C print(story)

Line B — Strings are joined with + (concatenation), not -. The attacker's story should be built with story = "I am a " + role

Question 5

A steps = []

B steps.append("pick a role")

C steps.append("build trust")

D steps.append("ask for data"

E print(len(steps))

Line D — The closing bracket of append() is missing. It should be steps.append("ask for data")

Student with a class code? Join your class →