Create intermediate Works with: Any AI

Spot a Phishing Message: A Practice Set With Reasons

Few shot Has example

Learn the signs of suspicious messages with examples.

The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.

Create a phishing awareness exercise for me. My usual services (bank, delivery, email, social media): [MY_SERVICES]. The types of message I worry about: [WORRIES].

Write 10 invented example messages (email and text) that range from obvious to subtle, with fake company names, covering urgent account problems, delivery fees, prize notices, invoices, password reset requests and messages from 'family' on a new number. Ask me to judge each as suspicious or safe. Then reveal answers with the signs: mismatched sender, urgency, links to look-alike addresses, requests for codes or payment, grammar, unexpected attachments. Provide a one-page checklist of what to do (do not click, go to the official site by typing it, contact through a known number, report), and what to do if I already clicked (change passwords, contact the bank, enable two-step login, check accounts).

Use only invented company names and links. Do not provide real phishing templates.

Add the first two example messages fully written with invented names (for example a delivery-fee text and a bank alert email), their answers, and the signs. Include a short rule I can memorise: pause, check the sender, go to the official site by typing it, and ask someone if unsure.

Fill in before use

Optional: type your details and the prompt above updates. Nothing is saved or sent.

Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.

Message 1: 'Your parcel is held. Pay a 1.99 fee at parcelhold-delivery.example.' Verdict: suspicious. Signs: unexpected fee, link to an unfamiliar domain, urgency.
Message 2: 'Your bank statement is ready' from an address that ends in your real bank's domain, with no link, and you did sign up for statements. Verdict: probably safe, but log in by typing the address yourself.
Message 3: 'Hi Mum, my phone broke, this is my new number, can you send 200?' Verdict: suspicious. Call the old number.
Rule: pause, check the sender, go to the official site by typing it, ask someone if unsure.