Can You Recognize a Phishing Attempt?

Quiz 10 min Beginner
Test your phishing awareness with ten scenarios about suspicious messages, links, QR codes, website addresses, authentication codes and safer verification.
Suitable for
Ages 13–17

Use this Quiz to test whether you can recognize common phishing warning signs and choose a safer response.

There are ten multiple choice questions.

The questions cover unexpected messages, urgency, suspicious links, website addresses, QR codes, authentication codes, browser warnings and independent verification.

A score of 80 percent or higher is considered a pass.

Read each situation carefully and choose the best answer.

After submitting the Quiz, review the explanations even when you answered correctly. Phishing messages can look convincing, so understanding why an answer is safer is more useful than memorizing one warning sign.

Before you begin

Review How to Recognize Phishing Messages if you need a refresher.

You can also review Identify the Warning Signs in a Phishing Email and Check a Link Before You Open It.

Sources and further reading

Choose one answer for each question, then submit the quiz to see your score and feedback.

Question 1: Which description best matches phishing?
Choose an answer
Question 2: You receive an unexpected message saying your gaming account will close today unless you sign in using the supplied link. What is the safest response?
Choose an answer
Question 3: Why can urgency be a phishing warning sign?
Choose an answer
Question 4: A friend sends you an unusual message containing only a shortened link and the words "Look at this." What is the safest first action?
Choose an answer
Question 5: A website uses HTTPS and your browser says the connection is secure. What does that prove?
Choose an answer
Question 6: An unexpected text tells you to scan a QR code immediately to fix a delivery problem. What is the safer response?
Choose an answer
Question 7: You open an unfamiliar website and your browser shows no danger warning. What can you conclude?
Choose an answer
Question 8: Someone claiming to be customer support asks you to send them the authentication code that just arrived on your phone. What should you do?
Choose an answer
Question 9: A message claims its link goes to portal.example.invalid, but a safe link preview shows portalverify.example.invalid. What should you conclude?
Choose an answer
Question 10: Which sequence is the best general response to a suspicious phishing message?
Choose an answer