The Tech Wise Interactive Learning Hub

SESSION 1

Spotting Scams & Fraud

About The Resource

Welcome to the Tech Wise Interactive Learning Hub, a hands-on extension of the Tech Wise six-part cybersafety series. This page offers practical H5P activities designed to help older adults strengthen their digital safety skills through real-world scenarios and guided practice.

Here, you’ll explore key topics covered in the Tech Wise program, such as recognizing scams, protecting personal information, using strong passwords, and browsing safely online. Each activity helps you apply what you’ve learned in a simple, interactive way using your own device.

Whether you’re new to technology or looking to build confidence online, this resource gives you a safe space to learn, test your knowledge, and become #UnHackable.

session 1 slideshow

Activity Instructions

Set Up 2FA 5

When you see the “On Your Device” icon in the presentation slide, scroll to the corresponding activity number to the presentation slide and complete the activity. Happy learning!

Email Header Spoofing

Untitled design 4

Checking email headers helps you spot spoofing attempts by revealing the sender’s real email address. Even if the display name looks familiar, the header shows whether the message truly came from someone you know or from a scammer pretending to be them. This simple check can prevent phishing, fraud, and harmful links from reaching you and your loved ones.

Email Header Check Activity

  1. Open your email inbox and look at the sender list.
  2. Check whether you can see each sender’s full email address, not just their name.
  3. Open one email and check the full email address again.
  4. Compare the display name with the actual email address.
  5. Ask yourself: Do they match, or is someone pretending to be a trusted contact?

Domain Spoofing

Untitled design 1 1

Domain spoofing happens when scammers create a fake website address that looks almost identical to a real one, hoping you won’t notice small changes like missing letters, extra characters, or swapped symbols. These look-alike sites are designed to trick you into entering personal information, passwords, or payment details. Learning to double-check URLs helps protect you and your loved ones from scams that hide behind convincing, but fraudulent, web addresses.

Domain Spoofing Activity

  1. Type knowldgeflow.org into your browser.
    • Where does it take you?
  2. Now type knowledgflow.org.
  3. How can you confirm this is the real, legitimate site?

Links

Untitled design 2 1

Scammers often create links that look almost identical to real websites by changing just one letter or adding extra characters. These fake links can lead to malicious sites that steal personal information or download malware. Always hover your cursor over a link before clicking to reveal the true destination and confirm it matches the legitimate website you expect.


Links Activity

  1. Visit KnowledgeFlow.org. How many links can you find on the page?
  2. How can you check whether a link is safe before clicking it?
  3. Hover over (or long-press on mobile) the “Contact Us” link to see where it leads.
  4. Based on the destination, does it look safe to click?

Online Ads

When you search online, sponsored ads usually appear first, but that doesn’t mean they’re reliable or secure. Scammers can buy ads to make fake websites appear at the top of search results. These ads may look legitimate but can lead to phishing pages or harmful downloads. Always be cautious with the first few results, look for small “Ad” or “Sponsored” labels, and scroll down to find the official website before clicking.

  • Do a search for: “local tech support near me”
    • What do you notice?
Untitled design 3 1

Pop-Ups

Untitled design 4 1

Pop-ups can appear while browsing and often try to grab your attention with urgent messages like “Your device is infected!” or “Click here to claim your prize.” These windows can be misleading, and many are designed to trick you into downloading harmful software, giving away personal information, or calling fake tech support numbers. If you see an unexpected pop-up, close the browser tab instead of clicking any buttons. Legitimate companies will never use pop-ups to warn you about viruses or demand immediate action.

Pop-Ups Activity

Go to: simplesscampage.pages.dev for a unique pop-up experience.
Not recommended for those with light sensitivity and seizures.

Phishing Quiz

To wrap up this session, click the button below to take the phishing below to tell the difference between legitimate websites and phishing attempts!

Take Quiz

Session 1 Wrap-Up & Checklist

In this session, you strengthened your ability to spot scams and fraud before they cause harm. You learned what scammers try to steal, how they deliver their messages, and the tricks they use to create urgency or fear. You also practiced checking caller ID, reviewing email headers, hovering over links, spotting domain spoofing, and staying cautious with attachments, ads, and pop-ups. These skills help protect not only you, but also your friends and family from account takeovers and financial loss.

  • Stay skeptical of unexpected messages, calls, or texts asking for money, information, or access.
  • Don’t trust caller ID; phone numbers can be spoofed.
  • Always check the full email address and email header to confirm who sent the message.
  • Hover over links before clicking to see the real destination.
  • Double-check website domains to avoid spoofed or look-alike sites.
  • Don’t open unexpected attachments, even if they appear to come from someone you know.
  • Be cautious of pop-ups and online ads; scammers often use them to push fake alerts or downloads.
  • Legitimate companies will never ask for remote access to devices.
  • Slow down when a message feels urgent or emotional; scams rely on quick reactions.