Phish or Legit? Email Sorting Game

Read each email below and decide whether it’s a phishing attempt or a legitimate message.

Level 1

Subject: Urgent! Your account has been suspended

From: support@amaz0n-secure.com

Dear Customer,

We detected suspicious activity in your Amazon account. Please click here immediately to verify your identity or your account will be closed.

Subject: Your receipt from the school bookstore

From: bookstore@myschool.edu

Thanks for your purchase! Your receipt for "Intro to Coding" is attached. Let us know if you have questions.

Subject: You’ve won a $1000 Gift Card!

From: promotions@freeprizesnow.biz

Congratulations! You’ve been selected for a free $1000 gift card. Claim now!

Level 2

Subject: IT Helpdesk Ticket #8281: Verify Your Email

From: techsupport@school-itdesk.com

Hello,

We’re upgrading our email servers. Please verify your login to avoid interruption in your school email access.

This is mandatory for all users by 5 PM today.

Subject: Your Amazon.com Order #113-9983773-0983745

From: order-update@amazon.com

Thanks for your purchase! Your item will be delivered Friday. You can track your package here.

If you didn’t place this order, go to Your Orders to cancel or report an issue.

Subject: Your School Password Will Expire in 24 Hours

From: admin@schoolsystem.net

This is an automated message. Your password will expire unless updated. Update it here.

Failure to do so will result in account lockout.

Subject: Quick Survey: Help Us Improve Lunch Options!

From: cafeteria@tsbvi.edu

Hi! The school cafeteria is gathering student input. Take this quick 3-question survey about your lunch favorites!

Thanks for helping us serve you better!

Level 3

Subject: Quick favor needed — please reply

From: Mrs. Burnett <mrs.burnett@gmail.com>

Hi,

I’m in a meeting and can’t talk. I need you to purchase some gift cards for staff appreciation. Just reply when you see this.

Thanks,

Mrs. Burnett

Subject: Important security update from Google

From: security@google.verify-account.com

Your Google account was accessed from a new device. If this wasn’t you, secure your account here.

Thank you, Google Security Team

Subject: Account Usage Alert - EduNet Services

From: security@edunet-services.com

Dear user,

Unusual sign-in activity was detected. If you did not initiate this login, please click here to review your account.

Thank you for using EduNet. Stay safe online.

Subject: FAFSA Application Reminder

From: notifications@fafsa.gov

Friendly reminder that your FAFSA form has not yet been completed. Be sure to submit by the priority deadline to maximize your aid options.

Apply or check your status at https://fafsa.gov

Level 4

Subject: Updated Payroll Calendar

From: hr@myschool.co (displayed as “HR Department”)

Hi team,

Attached is the revised payroll schedule for the spring term. Please review it and let us know if you notice any issues.

View Payroll Calendar

Subject: Incident Report

From: safety@myschool.edu

Hello,

Attached is a copy of the incident report from today’s fire drill. Please download the file and send it to your department head.

Attachment: incident_details.exe

Subject: Your Apple ID was used to sign in

From: appleid@apple.com

Your Apple ID was used to sign in to iCloud from a new device. If this was you, no action is needed.

If you didn’t make this change, click here to secure your account.