Computer Skills
Beginner
60 mins
Teacher/Student led
+80 XP
What you need:
Chromebook/Laptop/PC or iPad/Tablet

Staying Safe Online: Phishing, Scams, Malware, Age of Consent

Teacher Class Feed

Load previous activity

    1 - Introduction

    Welcome

    Young jobseekers, Work Experience students, and anyone with a bank card are prime targets for online scams in Ireland. The people running scams know you're busy applying for apprenticeships, signing up to Intreo, checking delivery texts, and managing a dozen accounts you rarely think about. Today's lesson builds a reference you'll actually use: a Scam Spotter you can look back at the next time a text or email feels slightly off.

    By the end of this lesson, you will be able to:

    • Recognise the common red flags of phishing emails, SMS scams, and malware attempts
    • Explain why two-factor authentication (2FA) matters and understand basic password hygiene
    • Explain the Irish digital age of consent and know where to report scams and harmful content

    Warm-up

    Have you ever received a text, email, or DM that felt wrong? Maybe a fake delivery notice, a "your Revenue refund is due" message, or a direct message from someone pretending to be a friend. In your head, picture the last suspicious message you saw. What was it that tipped you off? Hold that tell in mind, you'll use it later.

    2 - Key Concepts

    Five concepts you'll use for the rest of the lesson. Skim the table, then look back when you need to.

    ConceptWhy it mattersExample
    Phishing β€” fake messages (email, SMS, DM) that impersonate a trusted service to steal passwords or card detailsJobseekers are prime targets β€” attackers send fake Revenue, Intreo, and recruitment messages because you're expecting those"Revenue: €340 refund. Tap to claim: {{code:revenuerefund-ie.com}}" β€” a lookalike domain pretending to be revenue.ie
    Malware β€” harmful software from a bad link, a dodgy attachment, a pirated download, or an infected USBOne infected file can steal every saved password in the browser, including your email (the recovery account for everything else)A "free Photoshop cracked" download that installs a keylogger
    Two-factor authentication (2FA) β€” a second step after your password, usually a 6-digit code from an authenticator appThe thing that stops attackers when a password leaks β€” and passwords leak regularly in data breachesMicrosoft Authenticator or Google Authenticator on your phone shows the code
    Digital age of consent (Ireland = 16) β€” the age at which platforms can process your personal data without a parent's consent (Data Protection Act 2018)Under 16 means parents must consent before platforms can collect data β€” relevant if you help younger siblings or cousins sign upβ€”
    Reporting channels β€” the official Irish places to send a scam or harmful contentReporting is how scam domains get taken down, and it protects you if you've already clickedAn Garda SΓ­ochΓ‘na (garda.ie or local station) for cybercrime; {{code:hotline.ie}} for illegal content; your bank if money or account details are involved

    The three-check habit (use this every time)

    Before you click anything in a suspicious message, run these three checks in your head. It takes about 10 seconds.

    1. Who is it really from? Look at the actual sender address or phone number, not the display name. Real Revenue never texts you about refunds; real banks never ask for your PIN by email.
    2. Where does the link actually go? Hover over it (on desktop) or long-press it (on phone) without tapping. Look at the real domain. {{code:revenue.ie}} is real; {{code:revenue-ie.com}} and {{code:revenuerefund-ie.com}} are not.
    3. Is it manufacturing urgency? "Your account will be closed in 24 hours." "Claim within 48 hours." Urgency exists to stop you thinking. Slow down.

    3 - Step-by-step Task: Build the Scam Spotter Template

    Create the {{code:27_scam_spotter}} document and fully complete one scam entry (a fake Revenue refund SMS) as a worked example. You'll copy this template twice in the next step for two scams of your own. Notice how the three Tells bullets each start with Who / Where / Urgency β€” that's the three-check habit in action.

    4 - Common Issues

    Common Issues

    IssueSolution
    I can't find the Heading 1 or Heading 2 styleIn Word Online, make sure you're on the {{menu:Home}} tab first, then look for the Styles group. In Google Docs, click {{menu:Format -> Paragraph styles}} from the menu bar at the top.
    My whole document turned into Heading 1 by accidentSelect the line that should be normal text, then apply {{menu:Format -> Paragraph styles -> Normal text}} (Docs) or {{menu:Home -> Styles -> Normal}} (Word). Then press {{kbd:Ctrl+Z}} / {{kbd:Cmd+Z}} if you want to undo further.
    My text kept going in bold after I typed the labelPress {{kbd:Ctrl+B}} / {{kbd:Cmd+B}} once to toggle bold off, then type. If some words are already bold that shouldn't be, select them and press the same shortcut to un-bold.
    The lookalike link in my document became underlined and blue (a clickable hyperlink)That's fine for visibility β€” but do NOT click it in the doc either. If you want to turn it back into plain text, right-click the link and choose {{menu:Right-click -> Remove link}}.
    My document hasn't savedOnline documents save automatically. Look for "Saved" (Word Online) or "All changes saved in Drive" (Docs) near the filename. If you see "Saving…" for more than a few seconds, your internet is slow β€” wait before closing the tab.

    5 - Independent Practice: Finish Your Scam Spotter

    Independent Practice

    Your goal: Build a reference you'll actually use β€” a Scam Spotter with three scams written the way you'd brief a younger cousin, so next time one hits your inbox you already know the tell.
    Time: ~20 minutes
    Task: Open {{code:27_scam_spotter}} and add two more scam entries beneath the Revenue one. Use the same layout you just built β€” Heading 2 for the scam name, then bold labels on their own lines for "What it looked like", "Tells", and "What to do". Pick scams that are realistic for someone your age looking for Work Experience, an apprenticeship, or part-time work β€” think fake job offers, AnPost/delivery text scams, WhatsApp impersonation, fake Instagram password reset emails, or classified-site scams. At least one of your scams must be something that could plausibly land in your inbox in the next month.
    Success criteria:
    • Your document has three complete scam entries (the Revenue one plus two of your own), each with a Heading 2 title
    • Every entry has all three sections filled in: What it looked like, Tells, What to do
    • The Tells name specific patterns using the Who / Where / Urgency prefixes from the worked example, not just "looks suspicious"
    • The document is readable at a glance β€” someone skimming it could tell the three scams apart without reading every line

    Unlock the Full Learning Experience

    Get ready to embark on an incredible learning journey! Get access to this lesson and hundreds more on our learning platform.

    Copyright Notice
    This lesson is copyright of Coding Ireland 2017 - 2025. Unauthorised use, copying or distribution is not allowed.
    πŸͺ Our website uses cookies to make your browsing experience better. By using our website you agree to our use of cookies. Learn more