Phishing means fake emails, SMS, WhatsApp messages or links that look genuine but are designed to steal passwords, OTPs or money.
Key points
Warning signs: urgency (“within 10 minutes!”), prizes that are too good to be true, threats, spelling mistakes.
Before clicking, check the sender and hover over the link to see the real web address.
Type important website addresses yourself instead of clicking links.
Example
“Congratulations! You won ₹50,000. Click within 10 minutes to claim.” — this is a scam using urgency.
Remember
Urgency + prize + link = stop and check.
Quick self-check: What is phishing?
Fake messages that trick people into sharing passwords or money.
Lesson 2
Strong passwords and 2FA
Passwords are the keys to your accounts.
Key points
A long passphrase with mixed characters is strongest, e.g. Mango!River7Train*Blue.
Avoid 123456, “password”, your name or date of birth.
Use a different password for important accounts.
Two-factor authentication (2FA) adds a second check — an OTP or app code — besides your password.
Example
Even if someone steals your email password, 2FA stops them because they do not have the code on your phone.
Remember
Long passphrase + 2FA = strong protection.
Quick self-check: What does 2FA add?
A second check, such as an OTP or app code, in addition to your password.
Lesson 3
OTPs and fraud calls
An OTP (one-time password) is like a signature for a transaction.
Key points
Never share an OTP with anyone — not on call, SMS or WhatsApp.
Banks and genuine companies never ask for your OTP.
If someone calls claiming to be from the bank and asks for an OTP, hang up.
Example
A caller knows your name and says your account will be blocked unless you share the OTP. It is fraud — hang up.
Remember
No genuine bank asks for your OTP. Ever.
Quick self-check: Should you share half of an OTP if the caller seems genuine?
No — never share any part of an OTP.
Lesson 4
Safe browsing and Wi-Fi
Make sure you are on the real website before typing a password.
Key points
Use the official website address starting with https://; type it yourself when in doubt.
A padlock picture inside the page content proves nothing — check the real address bar.
Public Wi-Fi is risky for banking or logging in to important accounts — use mobile data instead.
Keep software and apps updated: updates fix security weaknesses.
Lock (Windows + L) or log out when you leave a staff-room computer.
Example
At a railway-station Wi-Fi, read the news, but wait to do net banking until you are on your own mobile data.
Remember
Official https address, no banking on public Wi-Fi, update and lock your devices.
Quick self-check: Why update software?
Updates fix security weaknesses.
Lesson 5
Cyberbullying
Cyberbullying is using phones, social media, games or messaging to harass, threaten or humiliate someone.
Key points
Signs: a child becomes withdrawn, avoids devices or school, or is upset after using the phone.
If a student reports it: listen, reassure, save evidence (screenshots) and follow the school’s reporting process.
Do not ignore it, do not ask the student to delete everything, and never post about it publicly.
Example
A student shows hurtful messages in a class group. The teacher thanks the student, saves screenshots and informs the counsellor as per school policy.
Remember
Listen → reassure → save evidence → report through school policy.
Quick self-check: What should a teacher do first if a student reports cyberbullying?
Listen, reassure, save evidence and follow the school’s reporting process.
Lesson 6
Deepfakes, social media and reporting
New risks need careful sharing and quick reporting.
Key points
A deepfake is AI-generated fake video, audio or images of real people — verify before you trust or forward.
On social media, share only general, school-approved event photos; never share students’ full names with addresses, passwords or OTPs.
In India, report cyber fraud as soon as possible on the official national portal cybercrime.gov.in.
Example
A video of a principal announcing a “holiday” looks real but the voice sounds odd. Check with the school office before sharing — it may be a deepfake.
Remember
Verify before forwarding; report fraud quickly at cybercrime.gov.in.
Quick self-check: Where can cyber fraud be reported in India?
On the national cybercrime portal, cybercrime.gov.in.
Ready?
You have covered every topic in the 15-question quiz. Everyone who completes the quiz gets a Certificate of Participation — aim for 70% or more to pass.
