Pause, verify, report
An urgent message isn't necessarily trustworthy. Check who sent it, how you know, whether a request makes sense and whether someone is pressuring you to act. When in doubt, use an official channel you already know; don't use contact details supplied in the suspicious message.
Scenarios are entirely fictional. Do not enter passwords, click links or upload personal information during this activity.
What would you do next?
Scenario 1 of 3
Choose a response to see the explanation.
Build your own safety briefing
Explain, in 40–60 words, how a student should react to a suspicious message requesting a password reset. State one warning sign and two appropriate actions.
Show one possible response
“A surprise message demanding an immediate password reset could be fraudulent. I would not open its link or share a code. I would verify the request through the school's official system or trusted IT team and use the approved reporting method if it looked suspicious.”
These are learning examples, not real incidents, and the advice is not a substitute for school safeguarding and incident procedures.