Round 1

Email from 'Netflix' saying your account will be suspended unless you log in now.

• Real
• Phish

Answer explanation

Phish – urgency and request to log in are classic phishing tactics.

Official update on your university website about upcoming exam schedules.

• Real
• Phish

Answer explanation

Real – it's posted on an official, verified site.

SMS claiming you’ve won a free iPhone and must click a link to claim it.

• Real
• Phish

Answer explanation

Phish – prize scams are a common phishing trick.

A colleague shares a Google Doc via your work email, and the sender’s address matches exactly.

• Real
• Phish

Answer explanation

Real – verified sender and expected sharing action.

Message from 'IT Support' asking for your password to fix an issue.

• Real
• Phish

Answer explanation

Phish – IT teams never request your password.

A PayPal alert email with correct grammar and links to paypal.com after hovering.

• Real
• Phish

Answer explanation

Real – link is legitimate and no red flags.

An email with your correct bank name but asks you to verify your account via a link.

• Real
• Phish

Answer explanation

Phish – banks never ask for verification via links.

LinkedIn connection request from someone you met at a conference.

• Real
• Phish

Answer explanation

Real – context matches your experience.

Instagram DM from a stranger offering you brand sponsorship with a link to 'verify account'.

• Real
• Phish

Answer explanation

Phish – unsolicited offers with verification links are suspicious.

Security alert from Google about a login from a new device, and it matches your recent activity.

• Real
• Phish

Answer explanation

Real – matches your actual login behavior.