Online safety: spot the phishing attempt

by Quizhat · 12 questions · Updated · CC BY

SafetyEnglish

For everyone who uses email, messaging and public wifi at work: suspicious links, passwords, two-factor authentication, public wifi and reporting scams. 12 questions, about 10 minutes. Sources: NIST SP 800-63B · Reviewed 21/10/2026 · Training support, not a certification.

Quiz questions

Question 1 · Single choice · 20s · 1 pt

An email from "IT Support" says your mailbox is full and asks you to log in via a link. What should you do?

  • Click quickly before your mailbox is closed
  • Forward the link to colleagues
  • Reply with your password
  • Don't click; check with IT through a known channel

Question 2 · Single choice · 20s · 1 pt

How can you check where a link really goes without clicking it?

  • Hover over it and read the address that appears
  • Click it once
  • Look at the colour of the text
  • Count the words in the email

Question 3 · True / False · 20s · 1 pt

A message that uses your name and your manager's name must be genuine.

  • True
  • False

Question 4 · Single choice · 20s · 1 pt

Which password is the strongest?

  • Your pet's name
  • 12345678
  • A long, unique passphrase such as "purple-river-eats-7-clocks"
  • Password123

Question 5 · Single choice · 20s · 1 pt

What does two-factor authentication add?

  • Faster logins
  • A second proof of identity, such as a code from an app, on top of the password
  • A second password identical to the first
  • A backup of your files

Question 6 · Multiple choice · 20s · 1 pt

Which are typical warning signs of phishing? (choose 2)

  • An expected message from a colleague with no links
  • A sender domain that is slightly misspelled
  • Pressure to act immediately
  • A newsletter you subscribed to, from its usual address

Question 7 · Single choice · 20s · 1 pt

You are in a café on public wifi. What is the safer choice for accessing work systems?

  • Turn off your firewall to connect faster
  • Log in to everything as usual
  • Use the company VPN or your phone's hotspot
  • Share the wifi password with strangers

Question 8 · True / False · 20s · 1 pt

Your bank will never ask you for your full password or one-time code by phone or email.

  • True
  • False

Question 9 · Single choice · 20s · 1 pt

What is "smishing"?

  • A secure email service
  • Phishing carried out by text message
  • An antivirus for smartphones
  • A type of firewall

Question 10 · True / False · 20s · 1 pt

If you clicked a phishing link by mistake, it's best to stay quiet to avoid embarrassment.

  • True
  • False

Question 11 · Single choice · 20s · 1 pt

A supplier emails to say their bank details have changed. What do you do?

  • Update the bank details right away
  • Pay both accounts to be safe
  • Reply to the same email to ask if it's true
  • Call the supplier on a number you already have to confirm

Question 12 · Single choice · 20s · 1 pt

Why should you keep software and apps updated?

  • There is no security reason
  • Updates slow down attackers' computers
  • Updates only change the colours
  • Updates fix security flaws that attackers could exploit

How to use it

Copy the quiz into your free account, edit it if needed and run it live: players join from their phones with a code or a QR code, no app needed. The correct answers are not published here: you see them in your copy.

Related quizzes

Report this quiz