dcf.cymru stimulus sheet · PSE / Well-being · Year 8
Four emails. Three are fake.
Everything on this sheet is invented. The companies, the school, the addresses and the web links are not real and must not be typed into a browser. Only the warning signs are real.
Cover teacher — no computers needed
Print one per pair. Pupils highlight the warning signs on the paper. Nobody needs to open an email client, and none of the addresses or links on this sheet exist.
Email 1
From: Setup-Bank Security Team <secure.alerts@setup-bank-verify.login-check.net>
Reply-To: winnings.dept@mailhost-8842.info
To: undisclosed-recipients
Subject: URGENT: your account will be CLOSED in 24 hours
Date: Sunday, 03:41
Dear Valued Customer,
We have detect unusual activity on you account. For you security we
have temporary limited your access. If you do not re-verify within
24 hours your account will be closed permanent and your funds
transfer to holding.
Please confirm your full name, date of birth, card number and PIN
using the secure portal below.
Click here: https://www.setup-bank.co.uk/secure
(the status bar shows: http://setup-bank.secure-login-check.net/v/?id=8842)
Failure to act will result in permanent closure.
Setup-Bank Security Team
Do not reply to this email.
Email 2
From: Scoolmail Helpdesk <it-helpdesk@scoolmail-support.com>
Reply-To: quota.admin@scoolmail-support.com
To: year8@ysgolnantgwyn.cymru
Subject: Mailbox full - action required
Date: Tuesday, 22:17
Attached: Mailbox_Quota_Form.html (14 KB)
Hello user,
Your mailbox has reached 99.8% of its storage quota. You will stop
receiving email, including homework, unless you act today.
Open the attached form and enter your school username and password
to release 2GB of extra storage. This is an automatic process and
takes 30 seconds.
Thank you,
Scoolmail Helpdesk
Email 3
From: Parcel Post Cymru <no-reply@parcel-post-cymru.delivery-fee.info>
To: (your address)
Subject: Your parcel is waiting - pay £1.87 redelivery
Date: Thursday, 05:02
Dear customer,
We attempted delivery of your parcel but no one was home. An
unpaid shipping adjustment of £1.87 is outstanding.
Pay the £1.87 now to release your item. Unclaimed parcels are
returned to sender after 48 hours.
Pay now: https://parcelpostcymru-tracking.pay-release.info/fee
No tracking number is available for this item.
Email 4
From: Head of Year 8 <headofyear8@ysgolnantgwyn.cymru>
Reply-To: headofyear8@ysgolnantgwyn.cymru
To: year8@ysgolnantgwyn.cymru
Subject: Year 8 trip to St Fagans - reminder about Friday
Date: Monday, 08:52
Bore da Year 8,
A reminder that the museum trip leaves from the top yard at 08:45
on Friday. Bring a coat and a packed lunch. If you have already
returned your form you do not need to do anything.
If you have any questions, come and find me in room B14 at break,
or ask your form tutor.
Diolch,
Head of Year 8
Ysgol Nant Gwyn
The five warning signs to hunt for
- Display name does not match the address. The name in front of the angle brackets is typed by the sender and can say anything. Read the domain instead — the bit just before the first single slash.
- Manufactured urgency. A deadline in hours, a threat of closure, or a sum of money you must pay now. Real organisations give you time.
- Generic greeting. “Dear Valued Customer”, “Hello user”, “Dear customer”. Your bank and your school know your name.
- The link text does not match where the link goes. On a computer you see this by hovering; on this sheet the real destination is printed underneath.
- An attachment or a form you did not ask for, especially one that wants a password. No school IT team and no bank will ever ask for your password.
What to do with a real one
Do not click, do not reply, do not open the attachment. Tell an adult. Suspicious emails can be forwarded to the National Cyber Security Centre’s reporting service.