Activity Handout: Phishing & Public Wi-Fi

Name: _____ Date: _____

This handout supports Cybersecurity Merit Badge requirement 4(c)–(d).

Part 1 – Spot the Phishing

Imagine you receive this email:

From: account-security@examp1e.com
Subject: URGENT: Your account will be deleted in 24 HOURS!

Dear User,
We detected unusual login activity. You must verify your password immediately or we will permanently close your account.
Click here: http://example.verify-login-security.tk

Thank you,
Security Team

A. List three red flags that suggest this might be phishing:

B. What should you do if you receive a message like this?

[ ] Click the link quickly before time runs out
[ ] Reply with your password so they can help
[ ] Delete/ignore, or verify by going to the official site/app directly
[ ] Forward to everyone you know

Circle the best answer above and explain why:

Part 2 – Safer Public Wi-Fi Use

List two risks of using public Wi-Fi:

For each risk, list one way to reduce the risk:

Part 3 – Your Own Examples

Write one example of a legitimate security email a company might send, and one fake phishing-like message. (You can describe, you don’t have to write the full email.)

Real security email example:

Fake phishing-style email example: