IT and Internet Literacy Quiz | Spotting Phishing Emails, Fake Sites, and QR Code Scams

A short deadline or threatened loss is used to rush your judgment, while a linked page unexpectedly requests login and financial information. Logos, names, and company details can be copied, so their presence does not prove legitimacy.

Display names and logos are easy to copy. Reveal the full sender address and compare its domain with the company's legitimate domain. Even if it appears correct, an unusual request for bank details before an application should be verified separately with the company.

Visible link text and the actual destination can be different. Here, the registered domain also differs from the stated site, so use an independent route such as a saved official address or app. Page colors and appearance do not verify the destination.

A friend's account can be compromised, so verify an unexpected attachment through a separate channel you already know. Checking only within the received conversation may allow the attacker controlling the account to answer.

Someone can replace a QR code, and its destination is not visible from the image alone. If a sticker looks altered, do not make even a test payment. Confirm the official payment method using the facility's established instructions or operator.

HTTPS and the padlock indicate encryption between the browser and the current destination. A fake site can also use HTTPS, so the indicator does not verify the operator, the products, or the absence of malware. Check the domain separately.

Report a suspicious message through the available reporting feature or designated channel, then delete it without using links, including unsubscribe. An attacker-controlled link may lead to a fake site or confirm that your address is active.

The submitted credentials may already have reached the attacker. Change the password immediately through the legitimate service, not through the fake page, and enable two-factor authentication. If the password was reused elsewhere, replace it there with a different password as well.

Malicious activity may not produce a visible change. On a personal device, update trusted security software, scan the system, and follow the results. For an employer- or school-managed device, follow the organization's reporting procedure instead of acting independently.

Attackers can reproduce a real company's logo and write polished messages. Because the charge is unfamiliar and the message requests card details, avoid its links and contact information and verify the account through a known official route.