Meaning, Detection and Prevention of Phishing for Primary 4

Phishing

Performance Objectives

By the end of the lesson, students should be able to:

1. define phishing.
2. state types of phishing.
3. explain ways of detecting phishing.
4. apply counter measures for phishing.

Meaning of Phishing

Phishing is a trick used by bad people online to steal personal information from others.

These bad people, called scammers, pretend to be someone trustworthy, like a bank, a popular company, or even a friend. They send fake messages or emails to try and get people to give away their passwords, bank details, or other private information.

Types of Phishing

Phishing can happen in different ways. The common types of phishing include:

1. Email Phishing: This is when scammers send fake emails that look like they are from real companies or people. The email might ask you to click a link or open an attachment to “verify your account” or “claim a prize.”
2. Message Phishing (Smishing): This happens through text messages (SMS) or chat apps like WhatsApp. The message might tell you that you have won something or that there is a problem with your account and ask you to click a link.
3. Website Phishing (Spoofing): Scammers create fake websites that look exactly like real ones. When you click a link in a phishing email or message, it might take you to one of these fake websites. If you enter your information there, the scammers can steal it.

Detecting Phishing

It is important to know how to spot phishing attempts so that personal information can be kept safe. Phishing messages often have certain signs that show they are fake. Ways of detecting phishing include:

1. Strange Attachments: Phishing emails or messages often come with attachments that you did not expect or that are from people you do not know. These attachments might contain harmful software if opened.
2. Links to Unrecognised Sites: Scammers often include links that look real but lead to fake websites. Before clicking a link, hover your mouse over it (without clicking) to see the actual web address. If the address looks strange or different from the real company’s website, it is likely a phishing attempt.
3. Poor Spelling, Grammar, and Design: Many phishing messages contain mistakes in spelling, grammar, or punctuation. They might also have poor design or blurry logos. Real companies usually send professional-looking messages without such errors.
4. Urgent or Threatening Language: Phishing messages often try to scare you into acting quickly. They might say your account will be closed, you will lose money, or you have won a big prize that you must claim immediately. This urgency is a trick to make you click without thinking.
5. Requests for Personal Information: Legitimate organisations like banks or schools will rarely ask for your password, bank account number, or other sensitive information directly through an email or message. If a message asks for this kind of information, it is a major red flag.

Counter-measures for Phishing

To guard against phishing and keep personal information safe, certain steps can be taken. These counter-measures help to protect against online scams:

1. Do Not Click Suspicious Links: Never click on links in emails or messages if they look strange or if you do not trust the sender. If you think a message might be real, go directly to the website by typing its address into your browser, instead of clicking the link in the message.
2. Do Not Open Strange Attachments: Avoid opening any attachments from unknown senders or attachments that you were not expecting, even if they seem to be from someone you know. Always confirm with the sender first if an attachment seems unusual.
3. Check the Sender Carefully: Always look at the sender’s email address or phone number. Scammers often use addresses that look similar to real ones but have small differences. For example, “mybank@gmai.com” instead of “mybank@gmail.com”.
4. Report Suspicious Messages: If you receive a message that you think is a phishing attempt, do not reply to it. Instead, report it to a trusted adult, like a parent or teacher. They can help you decide what to do.
5. Use Strong Passwords: Always use strong and unique passwords for all online accounts. A strong password includes a mix of capital letters, small letters, numbers, and symbols. This makes it harder for scammers to guess your passwords even if they get some information.
6. Be Careful with Personal Information: Never share your passwords, bank details, or other private information with anyone online, especially if they ask for it in an unexpected email or message. Real companies will not ask for this information in such a way.