New words for this lesson
Say them out loud. Then use one word in a sentence.
Would you click?
🤔 How many warning signs can you find?
Show answer
1 · Strange sender number. 2 · "Dear customer" — your bank knows your name. 3 · Urgency and fear. 4 · A link that only looks like a bank address. 5 · It asks you to confirm data.
The golden rule: never use the link in the message. Open your bank app yourself, or type the address you know.
Three more messages
🤔 Real or phishing?
Show answer
Phishing. The tiny amount is the trick — €1.99 feels harmless, so you type your card details. They don't want the €1.99. They want the card.
🤔 Real or phishing?
Show answer
Phishing. Real support never asks for your password or your 2FA code. The code is the last lock on the door — giving it away opens everything.
🤔 Real or phishing?
Show answer
Probably real — it came from inside the app you opened yourself and it asks you to confirm, not to type secrets. But if you did not start that payment: stop and call your bank.
The five things nobody ever needs
- Your PIN.
- Your full password.
- Your 2FA code — not to support, not to a friend, not to "your bank".
- Photos of your card (front and back).
- A crypto wallet recovery phrase.
Four habits that do most of the work
- Long beats complicated. A password of four random words is stronger than "P@ssw0rd!".
- One account, one password. If one site is hacked, the rest stay safe.
- Turn on 2FA everywhere money is involved.
- Check the sender and the link before you tap — fake addresses copy real ones closely.
🤔 Why is "one password everywhere" so dangerous, even if the password is good?
Show answer
Because you only need to lose it once. Attackers try a leaked password on many sites automatically — email, shop, bank. One key that opens every door.
Zusatzwissen · extra knowledge
A password manager stores a different long password for every site, so you only remember one. Many phones have one built in. It also warns you when a password has appeared in a known data leak.
Four steps, in this order
- Block the card or freeze the account in the app.
- Change the password — and everywhere you used the same one.
- Tell an adult you trust, and the bank. Fast.
- Keep screenshots. They help the bank and the police.
Nobody is "too clever" for a good fake message. Speaking up early is the smart move, not the embarrassing one.