Certificate Topics — Phishing Attacks — Spotting Them Before They Land (Year 1 Foundations)

School: Minister Destiny Testimony Schools Track: Adult Class: Certificate Topics — Year 1 (Foundations) · Home: Schools — Adult track Certificate behind this topic: "Cybersecurity Awareness: Phishing Attacks" — LinkedIn Learning, earned by Minister Destiny Marie Morgan (May 30, 2025) — earned ×2, including accredited versions (PMI-accredited version) Founded and presented by: Minister Destiny Marie Morgan, Minister

This lesson is educational information from Minister Destiny Testimony Schools. It teaches the public body of knowledge in this subject — the same ground Minister Destiny studied for her certificate — in this school's own words. It is not the original course, it does not award the original credential, and it is not legal or medical advice. If you are in danger right now, call 911.

Before you start

• This school never asks your name. Your progress is saved to your student record, so you can pick up on any device. If you pass this unit's quiz (80% or higher, retakes allowed), you earn a downloadable certificate with a blank line — you write your own name on it after you save it. Quiz answers are not shown; if you miss a question, re-read the lesson and try again.
• Phishing is the single most useful safety topic on Minister Destiny's certificate wall: it is how most scams, most malware, and most account takeovers begin. She earned this certificate twice, including an accredited version.
• Nothing in this unit requires technical skill. It requires a pause — and this unit teaches you exactly what to do inside that pause.

The lesson

Part 1. What Phishing Is — and Why It Works on Smart People

Phishing is a fraudulent message that impersonates someone trusted — a bank, a delivery company, a boss, a grandchild — to make you click a link, open an attachment, send money, or hand over passwords and codes. It works not because victims are foolish but because it is engineered around human pressure: it arrives when you are busy, it matches something you expect (a package, an invoice, a payroll problem), and it pushes you to act now, before doubt can catch up.

Part 2. The Pressure Tricks — Urgency, Authority, Fear, and Greed

Nearly every phishing message pulls at least one of four levers. Urgency: “Your account closes in 24 hours.” “A payment failed — fix it now.” Urgency exists to outrun your judgement; legitimate organisations rarely demand instant action through a link. Authority: the message claims to be from your bank, the IRS, the police, your company's CEO, or tech support — someone you are trained not to question. Fear: a charge you don't recognise, a warrant, a suspended account, a family member in trouble. Fear narrows thinking to the threat in front of you. Greed and curiosity: a refund, a prize, a bonus, a document “about you.” If a message makes your heart beat faster — in worry or in delight — that feeling is itself the warning sign. Professionals call this the emotional spike, and the rule is simple: when a message spikes your emotions, slow down the most.

Part 3. The Checks — Sender, Link, and Attachment

Three checks expose most fakes in seconds. Check the sender properly. On email, look at the actual address, not just the display name: “Bank Security” can sit on top of any address at all. Watch for look-alike domains — an extra letter, a swapped character, a real name attached to a free-mail address. A message about your account that comes from a random string of letters has already answered your question. Check the link without clicking. On a computer, hover over it to see where it really goes; on a phone, press and hold carefully to preview. Ask whether the destination matches the claimed sender, and remember that shortened links hide their destination entirely. The safest move bypasses the message altogether: open the company's app or type the address you already know, and check your account there. If the alert is real, it will be waiting for you inside the account. Treat attachments as guilty until proven innocent. An unexpected attachment — invoice, “shipping label,” “secure document” — can install malware or open a fake login page. If it was not expected, verify with the sender through a separate channel before opening, even if the message looks internal. PDF and document files are common vehicles; “enable macros” or “enable content” in a document is an instruction no honest invoice will ever give you.

Part 4. Phishing by Channel — Email, Smishing, and Vishing

Email phishing is the classic form: bulk lures (fake deliveries, fake invoices, fake account alerts) and targeted spear phishing that uses your name, your workplace, or a real ongoing conversation. Its workspace cousin, the fake-executive email ordering a payment or gift cards, targets employees who want to please a boss — and it succeeds precisely because questioning a boss feels risky. Your workplace defence is a culture where verifying a payment request is praised, not punished.

Smishing is phishing by text. Texts feel intimate and get opened fast, and phone screens hide addresses and link destinations. Delivery scams (“your package is held — pay a small fee”), bank-fraud alerts with a number to call, and wrong-number conversations that slowly become investment or romance lures are the everyday forms. The call-back trap deserves special notice: a text or voicemail warns of fraud and gives you a number — and the number reaches the scammer, who then “helps” you move your money to safety, which means to them. Vishing is the voice version: a live caller impersonating your bank's fraud department, tech support, or a government agency. Caller ID can be faked to display a real institution's name. The countermeasure never changes: hang up, and call the number printed on your card, your statement, or the official site — a number you chose.

Part 5. Impersonation Up Close — Bosses, Banks, and Family

Targeted phishing studies its victim. A message “from your supervisor” may use the real name, the real writing style scraped from public posts, and a believable pretext — “I'm in a meeting, buy gift cards for a client, don't call me.” A bank impersonation may include the last digits of a real account, bought from an old data breach, to earn your trust. A family impersonation — “Hi Mum, I lost my phone, this is my new number, I need help” — manufactures an emergency inside your love for your child or grandparent, and voice imitation is making the phone version harder each year.

The defences are social, not technical, and they work. Use a separate channel: contact the person at the number or address you already have, not the one in the message. Set a family verification habit: a code word or a question only your real family member could answer, agreed before any emergency. Let requests be weird. A real boss, bank, or child can survive your ten-minute verification delay. Only a scammer is harmed by it — which is rather the point. And teach the rule without embarrassment: in Minister Destiny's schools, checking is a sign of strength, never of distrust toward your own people.

Part 6. The First Hour After a Click — and How to Report

If you clicked, opened, paid, or typed — act in this order, and act now; the first hour matters more than a week of worry later. (1) Stop and disconnect the bleeding. If you entered credentials, change that password immediately from a clean device if you can, turn on multi-factor authentication, and change anywhere you reused the same password. If malware may have installed, disconnect the device from the internet and run your security software's full scan — or ask a trusted professional. (2) Protect the money. If you sent money or gave financial details, contact your bank through its real number at once; fast calls sometimes reverse transfers, and the bank can watch or freeze the account. (3) Report. In the United States, forward phishing emails to the Anti-Phishing Working Group at [email protected], forward phishing texts to 7726 (SPAM), and report the attempt to the FTC at ReportFraud.ftc.gov. At work, notify your IT or security contact immediately — they would rather hear it in minute five than discover it in month five, and honest workplaces treat the report as the save, not the crime. (4) Watch. For the following weeks, watch statements and account alerts, and consider the protections in the Protecting Your Privacy unit — including a credit freeze — if personal identifiers changed hands.

Say this plainly, to yourself or to anyone you help: clicking is a mistake, not a disgrace. Shame is the attacker's last tool, because it buys them silence and time. Refuse to give them either.

Words to know — Phishing Attacks — Spotting Them Before They Land

• Phishing — a fraudulent message impersonating a trusted sender to make you click, open, pay, or reveal information.
• Spear phishing — phishing aimed at a specific person or organisation, using researched details to sound convincing.
• Smishing — phishing delivered by text message.
• Vishing — phishing by voice call, often with caller ID faked to show a real institution.
• Spoofing — faking a sender address, caller ID, or website so a message appears to come from a trusted source.
• Look-alike domain — an address crafted to resemble a real one, with a swapped or added character.
• Payload — what a malicious link or attachment delivers: malware, a fake login page, or a payment demand.
• Business email compromise (BEC) — impersonation of, or intrusion into, a business account, usually to redirect a payment.
• Emotional spike — the surge of urgency, fear, or excitement a phishing message is designed to cause; a warning sign in itself.
• ReportFraud.ftc.gov — the FTC's reporting site where phishing attempts and fraud are reported in the United States.

Myths vs facts — Phishing Attacks — Spotting Them Before They Land

• Myth: Phishing messages are easy to spot because of bad spelling. Fact: Many are polished, branded, and personalised. Spelling is no longer a reliable test; sender, link, and expectation checks are.
• Myth: Only careless people fall for phishing. Fact: Phishing is engineered pressure that works on busy, tired, and frightened people — which is everyone, some of the time. Checks, not superiority, are the defence.
• Myth: If caller ID shows my bank's name, it really is my bank. Fact: Caller ID can be spoofed. Hang up and call the number on your card or statement.
• Myth: If I clicked but nothing seemed to happen, nothing happened. Fact: Credential theft and quiet malware installs look like “nothing.” The first-hour steps still apply.
• Myth: Reporting a message I received does nothing. Fact: Reports to the APWG and the FTC feed the filters and cases that protect the next thousand recipients.

Think it through — Phishing Attacks — Spotting Them Before They Land

At 8:40 on a workday morning, Dana receives an email headed “URGENT: Payroll account verification — action required today.” The display name is her company's HR director. It says a banking update failed and her pay may be delayed unless she re-enters her details through the link. Dana's rent is due Friday. Her heart is pounding before she has finished reading.

Walk it through: (1) Name the levers from Part 2: urgency (“today”), authority (HR director), and fear (pay delayed, rent due) — three levers in one message is itself a finding. The pounding heart is the emotional spike doing its work. (2) Run Part 3's checks: Dana expands the sender address and finds the director's name attached to an outside free-mail domain — a look-alike arrangement, not the company's domain. She does not click the link; hovering shows an unrelated address with “payroll” pasted into it. (3) Apply Part 4's separate-channel rule: Dana walks to HR — or calls the internal number she already has — and learns no such email was sent; two coworkers received it too. (4) Close the loop per Part 6: Dana reports the message to IT immediately and forwards it as her workplace directs, so the lure is pulled from every inbox. Her pay was never at risk. The only thing at risk was her credentials — and the checks, which took ninety seconds, protected them.

Try this — Phishing Attacks — Spotting Them Before They Land

• ☐ Find three old messages in your inbox or texts and run the sender–link–expectation checks on each, for practice
• ☐ Agree a family verification code word or question with one relative, before any emergency needs it
• ☐ Save the real contact routes now: your bank's number from your card, your workplace's IT/security contact, and ReportFraud.ftc.gov
• ☐ Turn on multi-factor authentication for your email and banking, so a single stolen password cannot open them
• ☐ Practise saying this sentence out loud until it feels natural: “I'm going to hang up and call the number I have, just to be safe”

Resources to keep — Phishing Attacks — Spotting Them Before They Land

• Federal Trade Commission Consumer Advice — consumer.ftc.gov — “How to recognize and avoid phishing scams” and reporting at ReportFraud.ftc.gov.
• Anti-Phishing Working Group (APWG) — apwg.org — forward phishing emails to [email protected]; the coalition's reports track phishing trends.
• Cybersecurity and Infrastructure Security Agency (CISA) — cisa.gov — phishing guidance and current alerts for individuals and workplaces.
• National Cybersecurity Alliance — staysafeonline.org — plain-language phishing explainers to share with family members.

What you earned / what's next — Phishing Attacks — Spotting Them Before They Land

✅ Phishing Attacks — Spotting Them Before They Land complete (quiz score 80% or higher): You can name the pressure tricks, run the sender–link–attachment checks on any message, protect yourself across email, text, and voice — and act fast and without shame if you ever do click.

Your certificate

Minister Destiny Testimony Schools Certificate of Completion — Phishing Attacks — Spotting Them Before They Land

This certificate is presented by Minister Destiny Marie Morgan, Minister

Awarded to: ______________________________ (write your name here after you download — your name is never collected or stored by this school)

Date completed: ______________

Congratulations. You have learned the pause that protects everything else — your money, your accounts, and the people who trust messages from you. Teach it to someone you love. — Minister Destiny Marie Morgan

This is a certificate of educational completion from Minister Destiny Testimony Schools. It is not a state license, a government certification, or the original course credential.

What's next: Return to the Certificate Topics for your next Year 1 Foundations topic.

Sources

• “How to recognize and avoid phishing scams” and phishing alerts — Federal Trade Commission Consumer Advice (consumer.ftc.gov) — pressure tactics, checks, and reporting steps, including forwarding email to the APWG and texts to 7726.
• Phishing Activity Trends Reports — Anti-Phishing Working Group (apwg.org) — phishing forms and reporting routes.
• Phishing guidance and joint advisories — Cybersecurity and Infrastructure Security Agency (cisa.gov) — channel-specific phishing defences.
• National Cybersecurity Alliance phishing resources — National Cybersecurity Alliance (staysafeonline.org) — plain-language family teaching material.

Course Record — Phishing Attacks — Spotting Them Before They Land

• Learning outcomes: On completing this unit, the student can:
• define phishing and explain why engineered pressure makes it effective on capable people
• identify the urgency, authority, fear, and greed levers in a real message
• run the sender, link, and attachment checks, including recognising look-alike domains, without clicking
• distinguish email phishing, spear phishing, smishing, and vishing and apply each channel's countermeasures
• use separate-channel verification and a family code word against boss, bank, and family impersonation
• carry out the first-hour response after a click and report to the APWG, 7726, and the FTC
• Study time: Approximately 1.5 hours — an estimate covering reading, activities, and the test. Students move at their own pace.
• Assessment: A 10-question test drawn only from this unit's lesson. 80% or higher passes and earns the unit certificate. Answers are not shown; your score is saved to your student record, and retakes are allowed.
• Level: Certificate Topics — Year 1 (Foundations) · Adult school · working rank on completion path: Freshman → Sophomore.
• Version: Version 1.0 — October 2026.

Minister Destiny Testimony Schools — Adult. Educational information only. Help lines: 911 for emergencies · 988 Suicide & Crisis Lifeline (call/text 988).