Spot a Phish

Phishing is when someone pretends to be a bank, game company or friend to steal passwords or money. The message often says act now, your account will close, or you won a prize you never entered.

Real companies rarely threaten you in one email. They do not ask for your password in a link. When something feels rushed or too good to be true, slow down.

Try the phishing check lab. Read each sample message and decide if it is safe or suspicious before you see the answer.

Look at the email address or account name carefully. [email protected] is not the same as the real payment site. One wrong letter can send you to a copycat page.

On phones, long press a link to preview the address before opening it. On laptops, hover with the mouse if your browser shows the real URL in the corner.

If a friend sends a strange link out of the blue, their account may be hacked. Message them another way or tell an adult.

If you are unsure, do not click. Open the app or site yourself by typing a name you trust, or ask a teacher or parent.

Report phishing in school email systems when your teacher shows you how. Delete the message after reporting.

Next you will look at app permissions, another way strangers try to reach your data.