Phishing

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. Which describes phishing?

A A fake message that tricks you into sharing login details

B A program that makes your computer run faster

2. An email says it is from your school but comes from 'school-help@free-prizez.com'. What should you think?

A It must be safe because it mentions my school

B The sender looks suspicious, so it could be phishing

3. A message says 'Act NOW or your account will be closed!' What is this?

A A normal message that I must reply to straight away

B An urgent message, a common sign of phishing

4. A message says 'You won a free game console! Click here to claim!' What is the best response?

A It is too good to be true, so do not click

B Click the link quickly before the prize is gone

5. You get a message with a strange link asking for your password. What should you do?

A Do not click, and tell a trusted adult

B Click the link and type in your password to check

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1phishing		AClicking a link in a suspicious message is unsafe because it can take you to a fake site that steals your login details. Do not click it.
2From: support@paypa1-security.com		BURGENT! You won a prize! Click now or lose it!
3Urgent or too-good-to-be-true messages are common signs of phishing		CEntering your password on a suspicious message gives your login details to a scammer. You should tell a trusted adult instead of keeping it secret.
4If you get a suspicious message, do not click the link and tell a trusted adult		DA suspicious sender address that copies a real company name with a small change
5Click the link in the message to check if it is real		EA fake message that tricks you into giving away login details or personal data
6Keep the odd message secret and type in your password to see what happens		FDo not click. Tell a trusted adult.

Definitions

phishing

Fill in the Blanks

Complete each line of code by filling in the missing parts.

________ = a fake message that tricks you

Phishing messages try to steal your ________

IF sender is unknown AND link looks odd THEN do not _____ and tell an adult

Tell a trusted _____ about phishing

IF message says 'Act now! You won!' THEN treat it as __________

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A sender = "support@bank-login.xyz"

B link_is_odd = True

C if link_is_odd:

D action = "click to check"

Question 2

A message = "Act now or lose access!"

B if "now" in message

C print("Phishing warning")

D print("Tell a trusted adult")

Question 3

A sender = prizes@win-big.biz

B if "win" in sender:

C print("Suspicious sender")

Question 4

A message = "You won a free phone!"

B if "free" in message:

C print("Looks safe, reply now")

Question 5

A link = "http://my-bank.fake.com"

B if "fake" in link:

C print("Do not click"

Answer Key

Phishing

Section A: Quick Questions

A — A fake message that tricks you into sharing login details

B — The sender looks suspicious, so it could be phishing

B — An urgent message, a common sign of phishing

A — It is too good to be true, so do not click

A — Do not click, and tell a trusted adult

Section B: Match the Pairs

phishing → A fake message that tricks you into giving away login details or personal data

From: support@paypa1-security.com → A suspicious sender address that copies a real company name with a small change

Urgent or too-good-to-be-true messages are common signs of phishing → URGENT! You won a prize! Click now or lose it!

If you get a suspicious message, do not click the link and tell a trusted adult → Do not click. Tell a trusted adult.

Click the link in the message to check if it is real → Clicking a link in a suspicious message is unsafe because it can take you to a fake site that steals your login details. Do not click it.

Keep the odd message secret and type in your password to see what happens → Entering your password on a suspicious message gives your login details to a scammer. You should tell a trusted adult instead of keeping it secret.

Section C: Definitions

phishing — A fake message that tricks you into giving away login details or personal data. Do not click its links; tell a trusted adult.

Section D: Fill in the Blanks

phishing = a fake message that tricks you

Phishing messages try to steal your password

IF sender is unknown AND link looks odd
THEN do not click and tell an adult

Tell a trusted adult about phishing

IF message says 'Act now! You won!'
THEN treat it as suspicious

Section E: Spot the Error

D — A suspicious link should never be clicked, even to check it. The line should be action = "do not click".

B — An if statement needs a colon at the end of the line. It should be if "now" in message:

A — The sender's address is text, so it must be inside quotes. It should be sender = "prizes@win-big.biz".

C — A free prize message is too good to be true, which is a phishing sign. The line should warn: print("Too good to be true").

C — The print call is missing its closing bracket. It should be print("Do not click").