Don't Get Played Staying Safe Online

Teenagers edition about private data protection, personal data online hygiene, scam and phishing explained in simple words with interactive games to learn in better.

Transcript

1. DIGITAL SAFETY Don't get played. Protecting your info, spotting scams and catching phishing before it catches you.
2. Ever got a message that felt… off? A “free skins” link. A friend suddenly asking for a code. An email saying your account will be deleted in 24 hours.
3. TODAY Four parts, two games 01 02 03 04 Your digital footprint How scammers think Phishing, together Smart with AI Personal info, passwords, privacy checkup Their tricks + the Be Scam Ready game Clues, links, then the phishing quiz example by example 14 min Don't get played 16 min Use it without turning off your brain 12 min 26 min 03
4. 01 Your digital footprint Everything you post, share and sign up for leaves a trail.
5. PERSONAL INFO Obvious info vs sneaky info Obvious Sneaky Full name and birthday Location tags and live stories Home address and phone number Your school logo in a photo School and class Your pet's name (a common Passwords and login codes security question) Your routine: “practice every Tue at 5” Don't get played 05
6. THE BILLBOARD TEST Would you put it on a billboard outside school? “You have the right to remain silent. Anything you post can and will be used against you.” Screenshots last forever, even “disappearing” posts. Would you be OK if… Would you be OK if… Would you be OK if… your grandma saw it? a future employer saw it? a total stranger saw it? Don't get played 06
7. REMEMBER THIS If it's free, you are the product. Social networks don't charge you because they earn from your profile: what you like, watch, search and where you go. They use it to build a picture of you and sell advertisers access to it. Don't get played 07
8. STORY TIME · 2012 One hour to lose a whole digital life 1 2 3 4 Hackers found his email and home address online Called Amazon pretending to be him and got the last 4 digits of his card Used those digits to get Apple to reset his iCloud Wiped his phone, tablet and laptop. Deleted his Google account. Victim: Mat Honan, a tech journalist at Wired. No password was cracked. Small pieces of info added up. Source: Wired, Aug 2012 08
9. LOCK IT DOWN Strong passwords, done right Go long One per account Use 4+ random words. Long beats complicated. If one site leaks your password, the rest of your accounts stay safe. purple-taco-rocket-library Let a manager remember A password manager (or your phone's built-in one) stores them for you. Never share a password. Not even with your best friend. Don't get played 09
10. THE WORLD'S MOST COMMON PASSWORD 123456 Number one again in 2025. A computer guesses it instantly. Tonight: check if your email was in a leak at haveibeenpwned.com Source: NordPass, most common passwords 2025 10
11. YOUR SECOND LOCK Turn on 2-step verification Even if someone steals your password, they still need your phone to get in. Turn it on for email first: your email can reset every other account. Don't get played Nobody legit will ever ask for your code. Not “support”, not a “friend”, not a game moderator. Someone asking for your code = someone trying to take your account. 11
12. TRY IT NOW · 3 MIN Privacy checkup Open one app you use every day Set your account to private Turn off location sharing (Snap Map: Ghost Mode) Remove followers you don't know in real life Don't get played 3:00 12
13. 02 How scammers think Scams aren't really about tech. They're about tricking people.
14. THIS IS HAPPENING HERE Scams in Estonia, by the numbers €29M 1,816 lost to scammers in 2025, 3× more than the year before phone and online scam reports to police in just Jan–Jun 2026 €13.2 M lost in those same six months of 2026 Scams now arrive in fluent Estonian. Bad grammar is no longer a reliable giveaway. Sources: RIA (Information System Authority), Feb 2026 · Police and Border Guard Board via ERR News, Aug 2026 14
15. STORY TIME · 2020 A 17-year-old took over Obama's and Elon Musk's Twitter 1 2 3 4 Phoned Twitter staff pretending to be their IT team Got their logins and took over 130 famous accounts Posted: “Send me Bitcoin and I'll send back double” People paid. He got caught: 3 years in prison. No genius hacking. Just a phone call (trick 3) and a too-good-to-be-true offer (trick 2). Sources: BBC, Guardian, Mar 2021 15
16. THE SCAMMER'S PLAYBOOK Five tricks they use again and again 1 Rush you “Act now or lose your account forever!” 2 Too good to be true “Free iPhone! Free Robux! You won!” 3 Pretend to be someone A friend, a brand, “support”, the bank 4 Scare you “Your account was hacked. You're in trouble.” 5 Keep it secret “Don't tell your parents about this.” Don't get played 16
17. WHAT IT LOOKS LIKE FOR YOU Scams aimed at teens Scam Sounds like Red flag Free game currency “10,000 V-Bucks free, just log in here” Wants your game login Fake giveaway “You won! Just pay the shipping” You pay to “win” Hacked friend “Can you send me the code I just sent you?” Asks for a code or money Too-cheap shop “Sneakers 90% off, today only” Unknown site, odd payment Easy-money job “Earn fast, just lend us your bank account” Money mule: that's a crime Don't get played 17
18. PLAY · 5 MIN Are you smarter than a scammer? Play Google's Be Scam Ready in pairs. Spot the trick before it gets you. Pair up, one device per pair 5:00 Play through the scenarios For each one, write down the playbook trick (1–5) bescamready.withgoogle.com Don't get played 18
19. DEBRIEF What gave it away? ? ? ? Which scenario almost fooled you? Which trick showed up the most? What would you do differently next time? Don't get played 19
20. 03 Phishing: don't take the bait Fake messages built to steal your logins, money or info.
21. PHISHING, BY THE NUMBERS Even Google and Facebook took the bait 1.13M phishing attacks recorded in just 3 months (Apr–Jun 2025). About 12,000 a day. STORY TIME · 2013–2015 A man from Lithuania set up a company with almost the same name as a real supplier, Quanta Computer, and emailed Google and Facebook fake invoices. They paid over $120 million. He got 5 years in prison. Sources: APWG Phishing Activity Trends Q2 2025 · US Department of Justice, Dec 2019 21
22. ANATOMY OF A PHISH · FAKE EXAMPLE Spot the five clues Weird sender address 1 From: Instagram Support <security@insta-gram-help.co> 2 Subject: URGENT: your account will be deleted in 24h 3 Dear user, Panic in the subject Generic greeting Link to the wrong site Asks for login or code We detected unusual activity. Verify your account now or it will be permanently removed. 4 5 Verify now → insta-gram-help.co/login Enter your username, password and code to continue. Don't get played 22
23. HOW A LINK IS BUILT Five parts of every link https:// accounts. google.com /signin ?hl=en Protocol Subdomain Domain Query https = private connection, not an honest site The site owner can make it say anything Who owns the site. Always check Which page on that site Extra details, like this part. language Path Only the domain tells you who you're really talking to. Everything else can be faked. Don't get played 23
24. CHECK THE LINK Find the real website name The real site is the part right before the first single “/”. Read it from right to left. Link Real site Verdict accounts.google.com/signin google.com Real google.com.secure-login.io/signin secure-login.io Fake instagram-verify.net/login instagram-verify.net Fake paypa1.com/account paypa1.com (a number one) Fake security@rnicrosoft.com rnicrosoft.com (r + n, not m) Fake Hover (or long-press on a phone) to preview a link. In doubt? Open the app or type the address yourself. Don't get played 24
25. QUIZ TOGETHER · 15 MIN Can you spot a phish? Take Google's Phishing Quiz. Answer each example yourself first, then we check it together. Use a made-up name and email when it asks Lock in your answer before we reveal it For each one: real or fake? What gave it away? Which trick? 15:00 phishingquiz.withgoogle.com Don't get played 25
26. 04 Use AI. Don't let it use you. A smart tool only makes you smarter if you still do the thinking.
27. AI IS ALREADY IN YOUR BACKPACK Almost everyone is using it 64–90% 64% 20,000 of Estonian students already used AI for schoolwork, mostly to finish faster of US teens use AI chatbots, and about 3 in 10 use them every day Estonian 10th–11th graders got school AI tools in 2025 through AI Leap. That's you soon. Sources: AI Leap (TI-Hüpe) · Pew Research Center, Dec 2025 · Ministry of Education and Research, 2025 27
28. YOUR BRAIN ON AI Use it or lose it 83% of people who wrote an essay with ChatGPT couldn't quote a single sentence from it minutes later. AI is a gym spotter. If it lifts the weights for you, you don't get stronger. Source: “Your Brain on ChatGPT”, MIT Media Lab, 2025 28
29. DON'T TRUST IT BLINDLY AI can be wrong. AI can be faked. IT MAKES THINGS UP · 2023 IT COPIES FACES AND VOICES · 2024 A New York lawyer used ChatGPT for a court case A video call where everyone was fake It invented 6 court cases that never existed. He handed them to a judge and was fined $5,000. An office worker in Hong Kong saw his boss and colleagues on a call. All deepfakes. He sent $25 million. Tip: agree a family code word for “is this really you?” calls. Sources: Mata v. Avianca (US court, 2023) · CNN, Financial Times, May 2024 29
30. SMART, NOT DUMMY Use AI like a coach, not a ghostwriter ✓ Smart ✗ Dummy Try first, then ask AI for help Ask AI first, every single time “Explain it until I get it” Copy-paste its answer as your homework “Quiz me before my test” Let it think so you don't have to Check important facts in a second source Trust it because it sounds sure Keep names, addresses and photos out Paste in your private info or friends' photos Don't get played 30
31. REMEMBER Stop. Think. Check. Tell. Stop Think Check Tell Feeling rushed or scared? Pause. Which playbook trick is this? Sender, link, and what it wants. A trusted adult. It's never your fault. If something goes wrong Change your password · report and block · tell a parent, teacher or counselor Don't get played 31