← Back to the activity

Class 9 Computer Science — Spotting a phishing message

Check a message against the five signs of a phishing attempt, working out for yourself whether the link in it belongs to whoever the message says it is from.

Name: ________________________

  1. 1.Put these messages in order of how many of the five signs each one shows, fewest first.

    • Opens “Dear Customer”, wrong site, one hour to act, about a prize you never entered for, asks nothing secret
    • Opens “Dear Customer”, right site, no time limit, about your own order, asks nothing secret
    • Uses your name, right site, no time limit, about your own order, asks nothing secret
    • Opens “Dear Customer”, right site, one hour to act, about your own order, asks nothing secret

  2. 2.You have ordered nothing at all. A message reads “Dear Customer, your order cannot be sent. Send us the code that has just arrived on your phone within two hours or the order is cancelled.” It links to “https://orders.parcelpost.com.claim-it.net/fix”, and the courier's own site name is parcelpost.com. How many of the five signs does it show?

  3. 3.A sports club's own site name is “riverside-club.com”. Which one of these links belongs to the club itself?

    • a) https://members.riverside-club.net/join
    • b) https://riverside-club.com.members-login.net/join
    • c) https://riversideclub.com/members
    • d) https://riverside-club.com/members

  4. 4.A link inside a message reads “https://secure.orchard-clinic.com.verify-id.net/login”. Write the site name this link really belongs to.

  5. 5.Here is a much shorter one, and you have entered no competition of any kind. It reads “Hello Friend, you have won a tablet. Reply to claim it.” There is no link in it and no time limit. How many of the five signs is that?

  6. 6.One of the five signs settles the matter on its own, however innocent the other four look. Which sign is it?

    • a) It is about something you never did
    • b) It asks for a secret
    • c) It does not use your name
    • d) It sets a deadline

  7. 7.Sort each of these messages by whether it sets a deadline, which is the second of the five signs.

    Groups: Sets a deadline · Sets no deadline

    • Your password was changed on Tuesday.
    • Confirm within one hour or your prize is given away.
    • Your account will be closed in 24 hours unless you act.
    • Pay by the end of the day or the charge doubles.
    • Your parcel is out for delivery today.
    • Here is the reading list for next term.

  8. 8.The link “https://library-account.check-now.net/renew” has been cut into its four pieces below. Which piece says whose site the link really belongs to?

    • a) /renew
    • b) library-account.
    • c) https://
    • d) check-now.net

Answer key — Class 9 Computer Science — Spotting a phishing message

  1. 1. 1. Uses your name, right site, no time limit, about your own order, asks nothing secret 2. Opens “Dear Customer”, right site, no time limit, about your own order, asks nothing secret 3. Opens “Dear Customer”, right site, one hour to act, about your own order, asks nothing secret 4. Opens “Dear Customer”, wrong site, one hour to act, about a prize you never entered for, asks nothing secret
  2. 2. 5
  3. 3. d) https://riverside-club.com/members
  4. 4. verify-id.net
  5. 5. 2
  6. 6. b) It asks for a secret
  7. 7. Your account will be closed in 24 hours unless you act. → Sets a deadline; Your parcel is out for delivery today. → Sets no deadline; Confirm within one hour or your prize is given away. → Sets a deadline; Here is the reading list for next term. → Sets no deadline; Pay by the end of the day or the charge doubles. → Sets a deadline; Your password was changed on Tuesday. → Sets no deadline
  8. 8. d) check-now.net