Phishing, Types, Detection and Prevention for Primary 4

Class: Primary 4
Term: Second Term
Week: 7
Age: 9 years
Duration: 45 minutes
Subject: Basic Digital Literacy
Curriculum Theme: Online Safety
Focal competence: Detecting and guiding against phishing while online
Key competencies/values: ICT and Digital Competencies; Information Literacy
Skills:

• Detecting phishing
• Guarding against phishing

Previous Lesson: Safe Internet Use, Safe Sites, Online Manners and Reporting Harmful Content
Topic: Phishing
Subject Matter: Meaning/types of phishing, detection and countermeasures

Specific Objectives

By the end of the lesson, pupils should be able to:

Cognitive Domain

• define phishing;
• state types of phishing;
• explain ways of detecting phishing;
• explain why guarding oneself against phishing is important.

Psychomotor Domain

• apply countermeasures against phishing.

Reference Materials

The following resources were used in planning this lesson:

• 2025 Revised 9 Years Basic Education Curriculum
• Relevant State Unified Scheme of Work
• Basic Digital Literacy for Primary Schools, Book 4
• The HeadTeacher Scheme of work

Instructional Materials

The teacher will teach this lesson with the aid of:

• A computer system connected to the Internet
• Video clips showing examples of phishing
• Projector
• Audio visual aids
• Pictures of suspicious messages

Rationale for the Lesson

This lesson is important because it teaches pupils how to identify and avoid online scams like phishing. Understanding phishing helps them protect their personal information and stay safe while using the internet. This knowledge is crucial for developing responsible digital citizens.

Prerequisite/Previous Knowledge

Pupils have basic knowledge of using the internet and understanding simple online communication.

Lesson Content/Board Summary

Phishing

Meaning of Phishing

Phishing is a type of online trick where fraudsters pretend to be trustworthy people or companies to steal your personal information. They try to get you to give them your passwords, bank details, or other private information.

Types of Phishing

There are different ways phishers try to trick people:

1. Email Phishing: This is the most common type. You receive an email that looks like it’s from a bank, a popular website, or a government agency, asking you to click a link or provide information.
2. Spear Phishing: This is a more targeted attack. The phisher already knows some information about you, like your name or job, and uses it to make the fake message seem more real.
3. Smishing (SMS Phishing): This involves sending fake text messages (SMS) that try to trick you into clicking a link or calling a fake number.
4. Vishing (Voice Phishing): This involves phone calls where the phisher pretends to be from a legitimate company or organisation to get you to reveal personal information.

Ways of Detecting Phishing

You can detect phishing attempts by looking for these warning signs:

1. Check Sender’s Email Address: The sender’s email address might look similar but not exactly match the real company’s address (e.g., “Amaz0n” instead of “Amazon”).
2. Look for Spelling and Grammar Errors: Phishing messages often have many mistakes in spelling and grammar.
3. Suspicious Links: Hover your mouse over any link (do not click!) to see the actual website address. If it looks strange or different from the company’s real website, it’s likely a phishing link.
4. Urgent or Threatening Language: Phishing messages often create a sense of urgency or fear, asking you to act immediately to avoid a problem.
5. Requests for Personal Information: Legitimate companies will rarely ask for your password, bank account number, or other sensitive information through email or text message.

Countermeasures Against Phishing

If you suspect a phishing attempt, take these steps:

1. Do Not Click Suspicious Links: Never click on links in emails or messages that you suspect are fake.
2. Do Not Reply: Do not reply to suspicious messages or calls.
3. Verify Sender Identity: If you are unsure, contact the company directly using their official website or a phone number you know is correct, not the one provided in the suspicious message.
4. Report Phishing Attempts: Forward suspicious emails to your email provider’s abuse department or report them to the relevant authorities.
5. Use Strong Passwords and Two-Factor Authentication: Use unique and strong passwords for your online accounts and enable two-factor authentication (2FA) for extra security.

Importance of Guarding Against Phishing

Guarding yourself against phishing is very important for several reasons:

1. Protect Personal Information: It prevents thieves from stealing your name, address, date of birth, and other private details.
2. Prevent Financial Loss: It stops fraudsters from accessing your bank accounts or credit card information and stealing your money.
3. Maintain Online Security: It helps keep your online accounts (like email and social media) safe from being hacked.
4. Avoid Identity Theft: If your personal information is stolen, criminals can pretend to be you, which can cause many problems.

Teaching Methods/Instructional Techniques

Discussion, Demonstration, Guided Practice, Question and Answer, Explanation, Observation, Practical Activity.

Instructional Procedures

Step 1: Introduction

Time: 5 minutes

Teaching Skill: Engaging/Questioning

Teacher’s Activity: The teacher greets the pupils and asks them if they have ever received a message (email or text) that looked important but felt a bit strange or scary. The teacher then introduces the topic of phishing as a way people try to trick others online.

Pupils’ Activity: Pupils respond to the teacher’s questions and listen attentively.

Learning Point: Online safety awareness

Step 2: Meaning of Phishing

Time: 7 minutes

Teaching Skill: Explanation/Definition

Teacher’s Activity: The teacher explains the meaning of phishing, using simple language and relatable examples of how someone might pretend to be a friend or a shop to get information. The teacher writes the definition on the board.

Pupils’ Activity: Pupils listen, ask questions, and repeat the definition after the teacher.

Learning Point: Phishing definition

Step 3: Types of Phishing

Time: 8 minutes

Teaching Skill: Classification/Illustration

Teacher’s Activity: The teacher discusses the different types of phishing, such as email phishing, smishing (text messages), and vishing (phone calls), providing a simple example for each. The teacher shows pictures of fake emails or text messages.

Pupils’ Activity: Pupils observe the examples and identify the different types of phishing.

Learning Point: Different phishing methods

Step 4: Ways of Detecting Phishing

Time: 7 minutes

Teaching Skill: Demonstration/Analysis

Teacher’s Activity: The teacher presents safe fictional examples of genuine and suspicious messages (emails, texts) on the projector. The teacher guides pupils to look for warning signs like strange sender addresses, bad grammar, urgent requests, and suspicious links.

Pupils’ Activity: Pupils identify warning signs in the examples and discuss what makes a message suspicious.

Learning Point: Phishing warning signs

Step 5: Countermeasures Against Phishing

Time: 6 minutes

Teaching Skill: Application/Guidance

Teacher’s Activity: The teacher explains and demonstrates practical countermeasures against phishing, such as not clicking on suspicious links, not replying, verifying the sender, and reporting phishing attempts. The teacher emphasizes “When in doubt, don’t click!”

Pupils’ Activity: Pupils state safe responses like not clicking and reporting. They practice what to do if they receive a suspicious message.

Learning Point: Phishing prevention steps

Step 6: Importance of Guarding Against Phishing

Time: 4 minutes

Teaching Skill: Explanation/Reinforcement

Teacher’s Activity: The teacher explains why it is important to guard against phishing, focusing on protecting personal information, preventing money loss, and avoiding identity theft. The teacher asks pupils to share why they think it’s important.

Pupils’ Activity: Pupils discuss and explain in their own words why guarding against phishing is important.

Learning Point: Online safety significance

Step 7: Evaluation/Review

Time: 5 minutes

Teaching Skill: Questioning/Assessment

Teacher’s Activity: The teacher evaluates the learning by asking the following questions:

1. What is phishing?
2. Mention two types of phishing.
3. State two ways you can detect a phishing email.
4. What is one thing you should NOT do if you get a suspicious message?
5. Why is it important to protect yourself from phishing?

Pupils’ Activity: Pupils answer orally and in writing.

Learning Point: Phishing knowledge assessment

Step 8: Note-Taking

Time: 4 minutes

Teaching Skill: Guided Writing

Teacher’s Activity: The teacher guides pupils to copy the essential Board Summary notes into their notebooks, ensuring they focus on the meaning, types, detection, countermeasures, and importance of guarding against phishing.

Pupils’ Activity: Pupils copy the notes carefully into their notebooks.

Learning Point: Phishing notes copying

Step 9: Conclusion

Time: 2 minutes

Teaching Skill: Summarisation/Encouragement

Teacher’s Activity: The teacher briefly reminds pupils to always be careful and think before clicking on links or giving out information online. The teacher encourages them to ask an adult if they are ever unsure about a message.

Pupils’ Activity: Pupils listen and acknowledge the advice.

Learning Point: Phishing protection reinforcement

Continuous Assessment/Further Study

Type: Homework

Instruction: Answer the following questions in your notebook:

1. In your own words, explain what phishing means.
2. List three different types of phishing attacks.
3. Imagine you receive an email from a bank asking for your password. What are two things you would look for to know if it’s a phishing email?
4. What should you do if you receive a text message that looks suspicious?
5. Why is it dangerous to give your personal information to a phisher?

Lesson Keywords

• Phishing – A trick by fraudsters to steal personal information online.
• Email Phishing – Phishing done through fake emails.
• Smishing – Phishing done through fake text messages (SMS).
• Vishing – Phishing done through fake phone calls.
• Countermeasures – Actions taken to prevent or stop something harmful.
• Suspicious – Causing a feeling that something is wrong or bad.

Differentiation

For weaker learners: Provide simplified visual aids with clear labels for detecting phishing. Pair them with stronger learners during activity sessions. Focus on understanding the meaning of phishing and the most basic detection tips (e.g., checking sender’s name and spelling errors).

For stronger learners: Encourage them to research and identify other types of online scams beyond phishing. Ask them to create a short poster or jingle about “how to spot a phish” for their classmates.

Suggested Lesson Videos

For videos on phishing for primary school children, search on YouTube for: phishing for kids primary school nigeria

Teacher Guide for Using This Lesson Plan

Before the lesson, ensure the computer and projector are set up and working. Prepare simple, fictional examples of both genuine and suspicious messages (emails or texts) to display for the pupils. These examples should clearly highlight the warning signs discussed in the lesson. During the lesson, encourage active participation and questions from the pupils. Emphasize the practical application of detection and prevention skills. Allow pupils to share their observations during the activity where they identify warning signs. Guide them carefully through the countermeasures, reinforcing the importance of not clicking suspicious links. Ensure pupils copy the Board Summary notes accurately during the dedicated note-taking step. For assessment, encourage both oral and written responses to check understanding. Remind pupils to always consult a trusted adult if they encounter anything online that makes them feel unsure or uncomfortable.