Braineos
Sign in
← Back to decks
Sign in to save your progress, vote, and build your own decks.Sign in

Spot the scam

How phishing, fake texts and phone scams work, and the habits that stop them: unique passwords, MFA and passkeys.

16 cards·by braineos-team
scamscybersecuritysafety
Study this deckPlay Tower Defense

Where this fits

scams

No other decks with this tag yet.

cybersecurity

No other decks with this tag yet.

safety
Crypto without losing it
16 cards
Phishing
A message pretending to be from someone you trust, to get you to click, pay or share login details.
Smishing
Phishing by text message, often a fake delivery, bank or toll notice.
Vishing
Phishing by phone call, often someone posing as your bank, tech support or a government agency.
Multi-factor authentication (MFA)
Logging in needs a second proof, such as an app code or security key, as well as your password.
Password manager
An app that creates and stores a unique, strong password for every account.
Passkey
A login tied to your device and unlocked with your face, fingerprint or PIN. There's no password to steal.
SIM swap
A criminal gets your phone number moved to their SIM card, so they receive your texted codes.
Spoofing
Faking a sender's name, email address or phone number so a message looks like it came from someone you trust.
Urgency trick
Pressure to act right now, like "your account closes today", so you don't stop to check.
Credential stuffing
Trying usernames and passwords leaked from one site on many other sites.
Look-alike domain
A web address made to resemble a real one, like paypa1.com instead of paypal.com.
A text says your parcel is held and asks for a $1.99 fee by link. What's the safest move?
  1. Pay it, it's small
  2. Reply STOP
  3. ✓ Check the delivery company's own app or site yourself
  4. Forward it to friends
Someone from "your bank" calls and asks you to read out the code they just texted you. What do you do?
  1. Read it out
  2. ✓ Hang up and call the number on your card
  3. Text it back instead
  4. Read out only half of it
A site you use leaks its passwords. What protects you best?
  1. The same strong password everywhere
  2. ✓ A unique password for each site, plus MFA
  3. Changing your password once a year
  4. Adding a number to the end
Which second factor is hardest to phish?
  1. A code by text
  2. A code by email
  3. ✓ A passkey or hardware security key
  4. Security questions
An email from "IT support" says your mailbox is full and links to microsoft-support-login.co. What's the giveaway?
  1. The friendly tone
  2. ✓ The link isn't the company's own domain
  3. It mentions your mailbox
  4. It arrived on a Monday