CyberShield Junior • Module 10 • Lesson 10.3

Scams, Social Engineering, and Human Risk

Cyber threats are not always about complicated technology. Many risks start when a message, post, website, or person pressures someone into clicking, sharing information, sending a code, or trusting the wrong request. This lesson teaches students how to pause and respond safely.

Real-Life Hook

Some cyber threats target people, not just devices.

Imagine a student gets a message that says their account will be locked unless they click now. Another message promises a free prize. Another asks for a login code. These messages may try to use emotion, trust, or pressure to make the student act too fast.

What You Will Learn

Safer online choices start with slowing down.

Explain what scams and social engineering mean in a safe, beginner-friendly way
Understand how online messages can pressure people into risky choices
Recognize warning signs like urgency, fear, fake rewards, and requests for private information
Practice safer responses without replying to suspicious messages or testing risky links
Know when to ask a trusted adult before sharing information, clicking links, or following instructions from a message

Safety Rule

Do not reply to suspicious messages for practice.

CyberShield Academy uses fake examples only. Students should not test real suspicious links, reply to real scam messages, send fake information, share login codes, or try to trick others for practice. The safer action is to pause and ask for trusted help.

Core Explanation

Social engineering uses pressure to turn normal people into the target.

A scam is a dishonest attempt to trick someone. Social engineering is when a person or message tries to influence someone into making a risky choice. The request might look like a prize, a warning, a favor, an account alert, a friendship message, or a fake official notice.

Human risk happens because people can be rushed, embarrassed, excited, scared, curious, or distracted. A student might click a link because a message sounds urgent, share a code because a friend account asks, or trust a request because it looks official.

Students do not need to investigate suspicious messages alone. A safer response is to stop, avoid clicking or replying, protect private information, check through official sources, and ask a trusted adult when a request feels confusing, secretive, emotional, urgent, or too good to be true.

Key Vocabulary

Important words for understanding scams and human risk.

Scam

A dishonest message, post, call, website, or request that tries to trick someone into giving information, money, access, or attention.

Social Engineering

When someone tries to manipulate a person into making a risky choice, often by using trust, fear, urgency, curiosity, or rewards.

Human Risk

The risk that comes from people being rushed, confused, pressured, distracted, or tricked into unsafe online actions.

Impersonation

When someone pretends to be a friend, teacher, company, app, school, or trusted person to make a request seem real.

Private Information

Information that should be protected, such as passwords, login codes, home details, school details, account information, or personal contact information.

Trusted Adult

A parent, guardian, teacher, counselor, coach, or other safe adult who can help a student make a safer choice online.

Scam Situation Breakdown

Scams can appear in many everyday online spaces.

Fake Prize Message

A student receives a message saying they won a reward, gift card, game item, or special access they did not enter to win.

Safer Choice

Do not click the link or share information. Ask a trusted adult to help check whether the message is real.

Pretend Authority Request

A message claims to be from a school, app, coach, club, or company and asks the student to act quickly.

Safer Choice

Use an official source or ask a trusted adult before following instructions from the message.

Friend Account Acting Strange

A message seems to come from someone the student knows, but the wording, request, or link feels unusual.

Safer Choice

Do not assume it is safe. Check with the person another way or ask a trusted adult before responding.

Pressure to Keep a Secret

Someone online asks the student not to tell adults while pushing them to share information, click something, or continue a conversation.

Safer Choice

Stop responding and tell a trusted adult. Safe help is more important than keeping a suspicious online request secret.

Warning Signs

Scams often use pressure before students have time to think.

Urgent Pressure

The message says the student must act immediately or something bad will happen.

Too-Good Reward

The message promises free money, game items, followers, gift cards, prizes, or special access for almost no effort.

Private Information Request

Someone asks for passwords, login codes, account details, school details, addresses, phone numbers, or other private information.

Pretending to Be Trusted

The sender claims to be a teacher, friend, company, school, app, coach, or organization but something feels off.

Secret Instructions

The person tells the student not to tell a parent, guardian, teacher, or other trusted adult.

Emotional Pressure

The message uses fear, guilt, excitement, embarrassment, curiosity, or panic to make the student act without thinking.

Smarter Choice vs Risky Choice

A message should not pressure students into unsafe actions.

Risky Choice

A student clicks a suspicious link, replies to an unusual request, shares a login code, or follows instructions because the message sounds urgent, exciting, official, or secret.

Smarter Choice

The student pauses, avoids replying or clicking, protects private information, checks through official sources, and asks a trusted adult for help.

Scenario Lab

Practice safer responses to scam pressure using fake examples.

The Free Gift Card Message

Situation

A student gets a message saying they won a gift card. The message includes a link and asks for a name, school, and email address to claim the reward.

Warning Signs

The reward was unexpected, the message asks for personal information, and the link is not from an official source.

Risky Response

Click the link and fill out the form quickly before the reward disappears.

Smarter Response

Do not click the link or enter information. Show the message to a trusted adult and use official sources to check it.

Why the Smarter Response Works

Unexpected rewards can be used to pressure people into sharing information. Pausing and getting help reduces risk.

The Fake School Account Alert

Situation

A message says a student school account will be locked unless they click a link and sign in immediately.

Warning Signs

The message creates urgency, asks for account action, and sends the student to a link instead of an official school login path.

Risky Response

Click the link and sign in because the message sounds serious.

Smarter Response

Do not use the message link. Ask a teacher, school staff member, parent, or guardian to help check the account through the official school system.

Why the Smarter Response Works

Account warnings should be checked through trusted official sources, not through scary or urgent message links.

The Friend Request That Feels Off

Situation

A student receives a message from a friend account asking them to send a login code because the friend is locked out.

Warning Signs

The request is unusual, asks for a code, and could mean the friend account is not actually being controlled by the friend.

Risky Response

Send the code because the message appears to come from someone familiar.

Smarter Response

Do not send the code. Check with the friend another way or ask a trusted adult for help.

Why the Smarter Response Works

Login codes are private. Even familiar-looking accounts can send unsafe requests if something is wrong.

The Secret Instructions

Situation

Someone online tells a student they can get special access to a game if they keep the conversation secret and follow instructions in a link.

Warning Signs

The person asks for secrecy, offers a reward, and pressures the student to follow unknown instructions.

Risky Response

Keep the secret and follow the link because the reward sounds exciting.

Smarter Response

Stop responding, do not click the link, and tell a trusted adult what happened.

Why the Smarter Response Works

Safe online choices should not require secrecy from trusted adults. Getting help protects the student.

Real-Life Action Steps

Use these habits when messages or posts feel suspicious.

Pause when a message creates urgency, fear, excitement, or pressure.
Do not click suspicious links from messages, posts, pop-ups, or unknown senders.
Do not share passwords, login codes, private information, or account details.
Check important requests through official apps, school tools, websites, or trusted adults.
Be careful even when a message appears to come from someone familiar.
Ask a trusted adult when a message feels secretive, confusing, emotional, urgent, or too good to be true.

Reflection Questions

Think before moving on.

What does social engineering mean?
Why do scams often use urgency or rewards?
Why should students protect login codes and private information?
Why can a familiar-looking account still send risky messages?
Who can students ask for help when a message feels suspicious?

Skill Check

Choose first, then reveal the safer answer.

Question 1

A message says a student won a gift card and must enter personal information to claim it. What is the safer response?

Choice A: Enter the information quickly
Choice B: Do not click or share information, and ask a trusted adult to help check it
Choice C: Send the message to more classmates
Reveal safer response

Correct Answer: Choice B

Unexpected prizes can be warning signs. Students should avoid clicking or sharing information and get trusted help.

Question 2

A message says an account will be locked unless the student clicks a link immediately. What is the warning sign?

Choice A: The message creates urgent pressure
Choice B: The message has a sentence
Choice C: The message mentions an account
Reveal safer response

Correct Answer: Choice A

Urgent pressure is a common warning sign. Important account issues should be checked through official sources.

Question 3

A friend account asks a student to send a login code. What should the student do?

Choice A: Send the code because it is from a friend
Choice B: Do not send the code, and check with the friend another way or ask a trusted adult
Choice C: Post the code in a group chat
Reveal safer response

Correct Answer: Choice B

Login codes are private. A familiar-looking account can still send unsafe requests if something is wrong.

Question 4

Someone online says to keep a request secret from adults. What is the safer response?

Choice A: Keep the secret and follow the instructions
Choice B: Stop responding and tell a trusted adult
Choice C: Click the link first and decide later
Reveal safer response

Correct Answer: Choice B

Suspicious online requests should not be kept secret from trusted adults. Getting help is the safer choice.

Junior Checklist

Before finishing Lesson 10.3, students should be able to say:

I can explain what scams and social engineering mean.
I can recognize urgency, fear, rewards, secrecy, and private-information requests as warning signs.
I can protect passwords, login codes, account details, and personal information.
I can check important requests through official sources instead of message links.
I can be careful even when a message seems to come from someone familiar.
I know when to ask a trusted adult for help.

Navigation

Lesson 10.3 complete.

Next, Lesson 10.4 will explain how updates, backups, and basic protection help reduce cyber risk.