Goals

✓ Learn techniques people use to steal identities.

✓ Review ways to prevent identity theft.

✓ Know to talk to a trusted adult if they think theyʼre a victim of identity theft.

✓ Recognize the signs of phishing attempts.

✓ Be careful about how and with whom they share personal info.

What is this phishing thing, anyway?

Phishing is when someone tries to steal information like your login or account details by pretending to be someone you trust in an email, text, or other online communication. Phishing emails – and the unsafe sites they try to send you to or the attachments they try to get you to open – can also put viruses on your computer. Some viruses use your contacts list to target your friends and family with the same, or a more personalized, phishing attack. Other types of scams might try to trick you into downloading malware or unwanted software by telling you that thereʼs something wrong with your device. Remember: A website or ad canʼt tell if thereʼs anything wrong with your machine!

Some phishing attacks are obviously fake. Others can be sneaky and really convincing – like when a scammer sends you a message that includes some of your personal information. Thatʼs called spearphishing, and it can be very difficult to spot because using your info can make it seem like they know you.

Before you click on a link or enter your password in a site you haven’t been to before, itʼs a good idea to ask yourself some questions about that email or webpage. Here are some questions you could ask:

• Does it look professional like other websites you know and trust, with the product’s or company’s usual logo and with text that is free of spelling errors?

• Does the siteʼs URL match the product’s or company’s name and information youʼre looking for? Are there misspellings?

• Are there any spammy pop-ups?

• Does the URL start with https://with a little green padlock to the left of it? (That means the connection is secure.)

• Whatʼs in the fine print? (Thatʼs often where they put sneaky stuff.)

• Is the email or site offering something that sounds too good to be true, like a chance to make a lot of money? (It’s almost always too good to be true.)

• Does the message sound just a little bit weird? Like they might know you, but you’re not completely sure?

And what if you do fall for a scam? Start with this: Donʼt panic!

• Tell your parent, teacher, or other trusted adult right away. The longer you wait, the worse things could get.

• Change your passwords for online accounts.

• If you do get tricked by a scam, let your friends and people in your contacts know right away, because they could be targeted next.

• Use settings to report the message as spam, if possible.

Activity

Copy this secret code: hhwcu

Click here and paste in your code to begin Don't Bite the Phishing Hook.

Takeaway

When youʼre online, always be on the lookout for phishing attacks in your email, texts, and posted messages – and if you do get fooled, make sure you tell an adult you trust right away.