Phishing Awareness Training

Based on Common Tips Guidelines

8 Common Signs of Phishing

Review these tips carefully before taking the quiz.

1. Mismatched URL (網址不匹配)

The text of the link looks real (e.g., www.hsbc.com), but the actual destination is different.

Action: Mouseover (hover) the link to see the real address. DON'T click!

2. Requests for Sensitive Info (索取敏感資料)

Phishers often ask for passwords, usernames, or credit card details directly via email forms.

Fact: Legitimate organizations rarely ask for passwords via email.

3. Too Good to Be True (難以置信的優惠)

Lottery wins you didn't enter? Unexpected inheritance? Vaccination lottery prizes?

Thought: If you didn't buy a ticket, you didn't win. It's a trap.

4. Uninitiated Actions (未做過的行動)

Emails claiming "You recently withdrew money" or "You requested a password reset" when you did nothing.

Goal: They want you to panic and click "Verify Information" to steal your login.

5. Money/Threats (勒索/匯款)

Hackers claim they have your private photos or data and demand Bitcoin within 48 hours.

Action: Do not pay. Report it. Do not reply.

6. Suspicious Sender Address (發件人可疑)

An email claiming to be "Professor Joel" or "University Admin" but sent from jte895@gmail.com or admin@hotmail.com.

Check: Official business is conducted via official organization email addresses.

7. Urgent Language (緊急語氣)

Subject lines like "URGENT REQUEST" or "Account Termination in 24 Hours".

Why: They want you to act fast without thinking.

8. Unexpected Attachments (意外附件)

Emails saying "Scanned Document from Printer" or "Invoice Attached" when you weren't expecting one.

Danger: These files often contain malware. Do not open them.

How to Report?

If you find a phishing email, report it to your system administrator.

Crucial Step: Forward the suspicious email as an Attachment so the headers are preserved.

Question 1 of 5