Security Awareness KitSpotting phishing: security awareness training
A 10-minute topic in a 8-part programme. What your people need to know:
- Urgency or pressure: 'act now', 'account suspended', 'CEO needs this today'.
- Sender or link that doesn't match: check the real address and hover over links before clicking.
The full module (5 points, a do and a don't, speaker notes) is in the Security Awareness Kit.
Quiz question
An email from 'IT Support' says your mailbox is full and asks you to log in via a link to avoid losing mail. What do you do?
- Click and log in quickly
- Reply asking if it's real
- Report it and check your mailbox the usual way
- Forward it to colleagues to warn them
Show the answer
C. Urgency plus a login link is a classic phishing pattern. Report it, then check through the normal app or site.
Which is the most reliable way to check where a link really goes?
- Read the link text
- Hover over it to see the real address
- Check the sender's display name
- Look for a company logo
Show the answer
B. Link text and logos are easy to fake; the real destination shows when you hover.
Take the free 10-question quiz