Phishing is the #1 attack vector used by cybercriminals worldwide. This theme teaches you to recognise fake emails, websites and messages: from simple scams targeting children to sophisticated business email compromise.
Why this theme matters
Over 90% of cyberattacks begin with a phishing email.
Scams cost individuals and businesses billions every year, often targeting people who don't know the warning signs.
Phishing exploits human psychology, not software vulnerabilities: awareness is the only defence.
What you'll learn
Email anatomy & red flags
How to read email headers, check sender addresses and spot suspicious patterns.
URL inspection
Why the link you see is not always where you go, and how to verify before clicking.
Vishing & smishing
Phone calls and SMS messages used to extract sensitive information.
Fake contests & prizes
Classic social engineering patterns designed to create urgency and bypass critical thinking.
Romance & investment scams
Long-term manipulation tactics that exploit trust and emotion.
Business Email Compromise
How attackers impersonate executives to authorise fraudulent transfers.