Donate
Back to Introduction to Cybersecurity Awareness
Sign in to save your progress and earn a certificate.

Module 2: Understanding Phishing & Social Engineering

Learning Objectives
  • Recognize the signs of a phishing email or message
  • Distinguish between phishing, smishing, and vishing
  • Identify common social engineering tactics like urgency and authority

Phishing is a scam that tricks you into revealing sensitive information or clicking a malicious link, typically by impersonating a trusted sender like a bank, employer, or delivery company. The same tactic has specialized names depending on the channel: smishing happens over SMS text messages, and vishing happens over phone calls, often with a caller impersonating tech support or a government agency. Social engineering — the psychological manipulation behind these scams — relies on predictable triggers: a false sense of urgency ('your account will be closed in 24 hours'), impersonated authority ('this is your bank's fraud department'), and fear or curiosity. Recognizing these emotional pressure tactics is often more reliable than trying to spot technical red flags alone.

Module Quiz

1. Which tactic is commonly used in social engineering scams?

2. Smishing is phishing conducted through:

3. Vishing refers to phishing attempts conducted via: