Analyze each situation below. Identify scams, deceptive links, and social engineering tricks!
Score: 0 / 5
Case #1: Lottery Alert
Congratulations! 🎉 You have won ₹50,000!
Click immediately to claim your prize:
free-prize123.example
Your offer expires in 10 minutes!
Clues & Red Flags:
• Too good to be true: You cannot win prizes for contests you never entered.
• Suspicious Domain:free-prize123.example is a classic throwaway phishing URL.
• Artificial Urgency: 10-minute timer prevents you from taking time to think clearly.
Case #2: Bank Account Suspension Warning
Your bank account will be blocked today.
Verify your account immediately.
Send your OTP to our customer support executive to prevent account closure.
Clues & Red Flags:
• Never Share OTPs: Real banks and legitimate services never ask for your OTP or PIN.
• Panic Tactic: Threatening account termination today is used to provoke immediate, unconsidered action.
Case #3: Unverified Contact Message
Hey! I think I know you from school.
Send me your phone number so I can add you to our private group.
Clues & Red Flags:
• Ambiguity: No specific names, class sections, or identifiable details are provided.
• Safe Practice: Choose Not Sure or treat it as suspicious until verifying identity in person or via trusted mutual friends before handing over private details.
Case #4: Official School Practical Notice
School Notice
Dear Students,
Tomorrow's computer practical will begin at 10:00 AM in Lab 2.
Please bring your computer notebook.
Safe Characteristics:
• No links, downloads, or credential requests.
• Informational routine notice with no pressure tactics.
Case #5: Security Audit Request
From: support@paytm-security-help.example
⚠️ URGENT!
Your account has been selected for security verification.
Failure to verify within 15 minutes will result in permanent account suspension.
Click here:
verify-account-now.example
Enter:
• Full Name
• Password
• OTP
• Bank details
Clues & Red Flags:
• Spoofed address: The domain paytm-security-help.example is not an authentic corporate address.
• Credential Harvesting: Requesting your password, OTP, and bank details in a single form is guaranteed fraud.
Level 2: Privacy Investigation
📸 The Oversharing Simulator
Social engineers look for clues in public posts. Find and click the 3 major security risks exposed in Rahul's post!
👦
rahul_sharma_cool
📍 Public • Delhi, India
🪪 St. Xavier's High
DOB: 14/08/2009 Roll: #4412
🐕
Tag: "Bruno"
🥤
❤️ 42💬 7↗️
rahul_sharma_cool So excited! Spending the morning with Bruno before our
🏖️ 2-week family trip to Goa! Our house is going to feel so empty from June 10th-24th!
#HolidayVibes #SummerTrip
🎯 Security Risks Identified:0 / 3 Found
Click on details inside the photo or caption that compromise privacy or safety...
Level 3: Defense Workshop
🛡️ The Password Fortress Challenge
Can you craft an unbreakable passphrase? Watch hackers' cracking computers fail in real-time!
Interactive Defense Lab💡 Tip: Combine 3-4 unrelated words