Your bank account will be blocked today.
Verify your account immediately.
Send your OTP to our customer support executive to prevent account closure.
Clues: Real banks never ask for OTPs or PINs. Fear tactics create irrational panic.
Case #3: Unknown Contact Request
Hey! I think I know you from school.
Send me your phone number so I can add you to our private group.
Clues: Vague acquaintance request with zero identifiable details. Choose Not Sure or Phishing until verified.
Case #4: School Notice
School Notice
Dear Students,
Tomorrow's computer practical will begin at 10:00 AM in Lab 2.
Please bring your computer notebook.
Safe: Routine internal notice without links, attachments, or requests for credentials.
Case #5: Security Audit Request
From: support@paytm-security-help.example
⚠️ URGENT!
Your account has been selected for security verification.
Failure to verify within 15 minutes will result in permanent account suspension.
Click here: verify-account-now.example
Enter: Full Name, Password, OTP, Bank details
Clues: Spoofed domain, harsh 15-minute deadline, and requests for password, OTP, and bank details.
Case #6: Free Game Currency Giveaway (Discord / Steam DM)
Hey bro! Discord partnered with Valve & Roblox for a 24-hr special promo! 🎮
Claim your 1,000 Free Robux / Steam ₹1,500 Gift Card here:
free-robux-steam-promo.example/login
Clues: Fake login forms designed to steal account tokens, inventories, and passwords.
Case #7: Library Book Due Reminder
From: library@stxavier-school.edu.in
Subject: Library Book Return Reminder
Dear Student,
"Introduction to Python" (Barcode #48102) is due for return on Friday. Please hand it in at the circulation counter before 3:00 PM.
Safe: Genuine school domain (.edu.in) with zero links, passwords, or payments required.
Case #8: Failed Courier Delivery Notice (Smishing)
SMS: [IndiaPost Alert] Package failed delivery due to missing flat number.
Update delivery details within 12 hours:
indiapost-redelivery-tracking.example/update.apk
Clues: Fake tracking link ending in .apk—this downloads Android spyware/malware.
Case #9: Urgent Email from the Principal (Spear Phishing)
From: principal.office.school@gmail.com
Subject: Urgent confidential favor
I am stuck in a board meeting and cannot take calls. Please buy 5 Apple Gift Cards (₹2,000 each) and email me the scratch codes right away.
Clues: Free @gmail.com sender instead of the school domain; requests untraceable gift cards.
Case #10: Social Media Copyright Violation Notice
Instagram DM:
From: @HelpDesk_Copyright_Center29
⚠️ Copyright Notice: A post on your profile violates copyright. Appeal within 24 hours or account will be deleted:
instagram-meta-appeals-case881.example
Clues: Instagram and Meta never send copyright strikes via DMs; only through official in-app notifications.
Ready to claim your Cyber Sentinel Certificate?
Complete this activity with at least 8/10, then head over to the Password Creator to unlock your official badge!