Phishing Awareness Quiz

You receive an SMS: "Your PhonePe KYC is pending. Tap to update: phonepe-kyc-verification.site"

• Real

• Phish

Answer explanation

The SMS is a phishing attempt. It uses a fake link to trick you into providing personal information. Always verify the source before clicking on links in messages, especially regarding financial services.

An email from [e-mail] claims your Google account will be deactivated.

• Real

• Phish

Answer explanation

The email from [e-mail] is a phishing attempt. Legitimate Google emails come from official domains like @google.com. Always verify the sender's address before taking action.

A message says: "You've won ₹1,000 GPay cashback. Scan the attached QR code to claim."

• Real

• Phish

Answer explanation

The message is a phishing attempt. Legitimate companies do not ask for personal information or require scanning QR codes to claim prizes. Always verify such messages directly with the company.

Your college email from [e-mail] says classes are cancelled tomorrow.

• Real

• Phish

Answer explanation

The email is from your college's official domain, indicating it is legitimate. Therefore, the message about class cancellation is real.

A browser pop-up says: "Your phone is infected! Tap to clean."

• Real

• Phish

Answer explanation

The pop-up is a phishing attempt, trying to trick you into clicking a malicious link. Legitimate alerts do not appear this way. Always be cautious with unsolicited messages claiming your device is infected.

A caller says: "I'm from PhonePe. Share your UPI PIN to complete a transaction."

• Real

• Phish

Answer explanation

The request to share your UPI PIN is a common tactic used in phishing scams. Legitimate organizations like PhonePe will never ask for sensitive information over the phone. Therefore, this call is a phishing attempt.

A message claims: "You've won a smartwatch. Click here: luckywatchgift.fun"

• Real

• Phish

Answer explanation

The message is a phishing attempt, as it offers a prize to lure you into clicking a suspicious link. Legitimate companies do not randomly award prizes without prior engagement.

You receive an email from [e-mail] after booking on IRCTC.

• Real

• Phish

Answer explanation

The email from [e-mail] is legitimate, as it comes from the official IRCTC domain. Therefore, the correct answer is 'Real', indicating that this is a genuine communication following your ticket booking.

On Instagram, someone sends: "Amazon is hiring. Send your resume via WhatsApp."

• Real

• Phish

Answer explanation

The message suggests sending a resume via WhatsApp, which is unusual for a legitimate job offer. This is a common tactic used in phishing scams to collect personal information, making it a phishing attempt.

A stranger sends a PDF on WhatsApp titled "Semester Results."

• Real

• Phish

Answer explanation

The PDF titled 'Semester Results' from a stranger is likely a phishing attempt. Such unsolicited messages can contain harmful links or malware, making 'Phish' the correct choice.