← Years 5–6 Digital Systems

Phishing

A fake message that tricks you into giving away login details or personal data. Do not click its links; tell a trusted adult.

Part of: 5-6 Digital Technologies Vic Curric - Digital Systems & Security — Module 47, 7-8 Digital Technologies Vic Curric - Digital Systems and Security — Module 62, ACARA Digital Technologies Years 5–6 — Staying Safe Online — Module 22, ACARA Digital Technologies Years 5–6 — Digital Footprints — Module 34, ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 11

Understanding Phishing in Years 5–6 Digital Systems

What it does: Phishing messages use pressure and big rewards to make you act fast without thinking, which are warning signs. The safe response to a phishing message is to avoid the link and ask a trusted adult for help. Phishing is a fake message designed to trick you into giving away login details or personal data. Check the sender's address. If it does not match the real organisation, it may be phishing. Phishers use urgent messages to make you panic and act before you think. Too-good-to-be-true offers are a classic phishing trick. Do not click the link. Never click suspicious links. Tell a trusted adult such as a parent or teacher.

Common mistakes: A suspicious link should never be clicked, even to check it. The line should be action = "do not click". An if statement needs a colon at the end of the line. It should be if "now" in message:.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Phishing to a class →

This module's key terms are also in a printable crossword (Modules 41–52) and word search (Modules 21–52).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which describes phishing?
A fake message that tricks you into sharing login detailsA program that makes your computer run faster
Matches
Click the link in the message to check if it is real
↓
Clicking a link in a suspicious message is unsafe because it can take you to a fake site that steals your login details. Do not click it.
Applying
Meanings
Term
phishing
Meaning
A fake message that tricks you into giving away login details or personal data. Do not click its links; tell a trusted adult.
Practice
IF sender looks odd OR link looks odd THEN
Testing
Gaps
= a fake message that tricks you
Check Answer
Spots
3if link_is_odd:
4 action = "click to check"

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Dolphin' badge — Reef Streak, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which describes phishing?
A. A fake message that tricks you into sharing login details ✓
B. A program that makes your computer run faster
Phishing is a fake message designed to trick you into giving away login details or personal data.
2. An email says it is from your school but comes from 'school-help@free-prizez.com'. What should you think?
A. It must be safe because it mentions my school
B. The sender looks suspicious, so it could be phishing ✓
Check the sender's address. If it does not match the real organisation, it may be phishing.
3. A message says 'Act NOW or your account will be closed!' What is this?
A. A normal message that I must reply to straight away
B. An urgent message, a common sign of phishing ✓
Phishers use urgent messages to make you panic and act before you think.
4. A message says 'You won a free game console! Click here to claim!' What is the best response?
A. It is too good to be true, so do not click ✓
B. Click the link quickly before the prize is gone
Too-good-to-be-true offers are a classic phishing trick. Do not click the link.
5. You get a message with a strange link asking for your password. What should you do?
A. Do not click, and tell a trusted adult ✓
B. Click the link and type in your password to check
Never click suspicious links. Tell a trusted adult such as a parent or teacher.

Match the Pairs

phishing → A fake message that tricks you into giving away login details or personal data
From: support@paypa1-security.com → A suspicious sender address that copies a real company name with a small change
Urgent or too-good-to-be-true messages are common signs of phishing → URGENT! You won a prize! Click now or lose it!
If you get a suspicious message, do not click the link and tell a trusted adult → Do not click. Tell a trusted adult.
Click the link in the message to check if it is real → Clicking a link in a suspicious message is unsafe because it can take you to a fake site that steals your login details. Do not click it.
Keep the odd message secret and type in your password to see what happens → Entering your password on a suspicious message gives your login details to a scammer. You should tell a trusted adult instead of keeping it secret.

Key Term

phishing
A fake message that tricks you into giving away login details or personal data. Do not click its links; tell a trusted adult.

Fill in the Blanks

1. phishing = a fake message that tricks you
Hint: Type the name for a fake message that tricks people into sharing login details.
2. Phishing messages try to steal your password
Hint: Type the login detail that phishing messages often try to steal.
3. IF sender is unknown AND link looks odd THEN do not click and tell an adult
Hint: Type the action you must NOT do with a suspicious link.
4. Tell a trusted adult about phishing
Hint: Type who you should tell when you get a suspicious message.
5. IF message says 'Act now! You won!' THEN treat it as suspicious
Hint: Type the word describing how to treat an urgent, too-good-to-be-true message.

Spot the Error

Question 1
A sender = "support@bank-login.xyz"
B link_is_odd = True
C if link_is_odd:
D action = "click to check"
Line D — A suspicious link should never be clicked, even to check it. The line should be action = "do not click".
Question 2
A message = "Act now or lose access!"
B if "now" in message
C print("Phishing warning")
D print("Tell a trusted adult")
Line B — An if statement needs a colon at the end of the line. It should be if "now" in message:
Question 3
A sender = prizes@win-big.biz
B if "win" in sender:
C print("Suspicious sender")
Line A — The sender's address is text, so it must be inside quotes. It should be sender = "prizes@win-big.biz".
Question 4
A message = "You won a free phone!"
B if "free" in message:
C print("Looks safe, reply now")
Line C — A free prize message is too good to be true, which is a phishing sign. The line should warn: print("Too good to be true").
Question 5
A link = "http://my-bank.fake.com"
B if "fake" in link:
C print("Do not click"
Line C — The print call is missing its closing bracket. It should be print("Do not click").

Student with a class code? Join your class →