MODULE 02 / 08 · EMAIL SECURITY

Phishing Awareness

Learn how phishing works, recognise suspicious messages and practise responding safely to emails designed to steal personal or financial information.

What you will learn

01 · Identify Recognise suspicious emails and common phishing signs.

02 · Investigate Understand urgency, misleading links and sender details.

03 · Respond Learn how to verify messages through official channels.

Interactive Phishing Simulation

SCENARIO 01 · BEGINNER

EXAMINE THE EMAIL

An urgent bank notification

Imagine that you receive the following email. It claims to come from your bank and warns that your account will be suspended unless you take immediate action.

SAMPLE EMAIL · SECURITY WARNING

From: account-alert@example.invalid

Subject: URGENT: Your bank account will be suspended!

Dear Customer,

We detected unusual activity on your bank account. Your account may be restricted if you do not verify your details immediately.

Click the link below to confirm your account:

[Suspicious account verification link]

Failure to respond may result in account suspension.

Regards,
Account Security Team

Security reminder: This is a fictional training email. The displayed link is not clickable. Never enter personal or banking information into suspicious websites.

What is the safest action to take?

Practical Lab 02 — Phishing Inbox Investigation

JUNIOR SOC ANALYST TRAINING · INTERACTIVE SIMULATION

YOUR ROLE: EMAIL SECURITY ANALYST

Mission: Investigate four incoming emails

Review a fictional organisation's inbox. Examine each sender, reply-to address, message, displayed link, attachment and simulated authentication result. Classify each message as phishing or legitimate, then review the investigation feedback.

Select an email from the inbox. Use the inspection control to reveal its technical evidence before making your decision. You can revisit reviewed messages, but each message is scored only once.

Safe training environment: All messages, domains, headers and attachments in this exercise are fictional. Domains use the reserved .example namespace. Links are displayed as text only; they are not clickable. No email is sent, no attachment is downloaded and no credentials are requested or collected. SPF, DKIM and DMARC results are simulated evidence, not live email authentication checks.

Key takeaway

Phishing emails often use urgency, fear and misleading links to trick people into sharing sensitive information. Never trust an unexpected security warning just because it looks official. Contact your bank using its official website, app or verified phone number.