Phishing and Fake Login Pages
Identify the hallmarks of a phishing email — including domain mismatches, urgency, and credential requests — and describe the correct response when one is received.
In this lesson
Phishing and Fake Login Pages is part of Protecting Your Financial Identity. This preview shows how financial-data-privacy connects to everyday family decisions such as earning, saving, spending choices, goals, approvals, or parent-guided money conversations inside Progress Penguin.
Think about this money choice
Aisha receives an email that looks exactly like one from her bank, asking her to log in and confirm her details. The link in the email takes her to an unfamiliar website.
How it works
Phishing is the practice of sending fraudulent emails or messages that impersonate trusted organisations — banks, government bodies, delivery companies — to trick recipients into revealing login credentials, personal information, or making payments. Phishing emails often look authentic: they may use real logos, official-sounding language, and urgent requests. The key indicator is always the link destination or sender domain — not the appearance of the message.
Apply it to a real decision
Real-life money moment: Aisha receives an email that looks exactly like one from her bank. It uses the bank's logo, colours, and format. The email asks her to log in and confirm her details. The link takes her to an unfamiliar website — the address is 'secure-mybank-login.com' not the real 'mybank.com'. The email is a phishing attempt. The sender controlled the design but not the domain.
Activity preview
Try one real money action
Open Tasks and submit proof for one task, or open Requests and make a deposit request. Parent approval can happen later.
Quiz preview
Phishing and fake login pages steal your details by:
You receive an email: "Your account is suspended. Login here: secure-account-verify.example." This is: