CyberShield Lesson

Scam Awareness

Scams are tricks that try to pressure people into clicking links, sharing private information, sending money, or giving away account access. This lesson helps students recognize warning signs and make safer choices.

Learning Goals

  • Identify common scam and phishing red flags.
  • Understand how urgency and fear are used to pressure people.
  • Know safer actions to take instead of clicking.
  • Learn when to report suspicious messages.

Key Skill

Pause before clicking, check the message carefully, and ask a trusted adult or technology staff member when something feels suspicious.

Safety Rule

Do not click real suspicious links to test them. Use fake examples only and report real concerns safely.

What Are Scams and Phishing?

A scam is a dishonest message, website, call, or post that tries to trick someone. Phishing is a type of scam that often pretends to be a trusted person, company, school, or service.

Scammers may ask for passwords, login codes, personal details, payment information, or urgent action. A safer response is to pause, verify, and ask for help before doing anything.

Common Scam Red Flags

Urgency

Messages that say you must act immediately or your account will be closed.

Fear

Messages that try to scare you into clicking, replying, or sharing information.

Prizes

Messages claiming you won something you never entered.

Unknown Senders

Messages from people, accounts, or addresses you do not recognize.

Suspicious Links

Links that look strange, misspelled, shortened, or unrelated to the real organization.

Requests for Passwords or Codes

Messages asking for passwords, MFA codes, verification codes, or private information.

Fake Scenario Examples

Fake Message 1

“Your school account will be deleted in 10 minutes. Click this fake link now and enter your password to keep access.”

Red Flags

  • It uses fear and urgency.
  • It asks for a password.
  • The link is not verified.

Fake Message 2

“Congratulations! You won a free phone. Reply with your full name, birthday, address, and login code to claim it.”

Red Flags

  • It offers a prize you did not enter.
  • It asks for private information.
  • It asks for a login code.

What To Do Instead of Clicking

  • Pause and do not rush.
  • Do not click the link.
  • Do not reply with private information.
  • Do not share passwords or login codes.
  • Check with a trusted adult, teacher, or school tech staff.
  • Go to the real website or app by typing it yourself.

Reporting Suspicious Messages

Reporting is a smart defensive action. If a suspicious message appears on a school account, tell a teacher or technology staff member. If it appears on a personal account, ask a parent, guardian, or trusted adult for help.

Do not investigate suspicious links alone. The goal is to stay safe, protect your accounts, and help others avoid the same trick.

Common Mistakes

Clicking because the message looks official.
Sharing a login code because someone says it is urgent.
Trusting a prize message without checking if it is real.
Testing suspicious links on your own device.

Practice Activity

Read a fake message and list three red flags. Then write one safe action the student should take instead of clicking, replying, or sharing information.

Reflection Questions

  1. Why do scammers often create urgency?
  2. What should you do before clicking a link in a message?
  3. Why should login codes stay private?
  4. Who could you report a suspicious school message to?

Safety Reminder

CyberShield Academy teaches safe, ethical, defensive cybersecurity. Do not test real suspicious links, collect private information, or investigate accounts that are not yours. Use fake examples only.