Can you spot the phish? Read the email below and find as many warning signs as you can, then print it and circle them. Clients can check the answer key at the bottom.

October 2026

Spot the Phish β€” October 2026

This email is made up for practice; any resemblance to a real organization is coincidental. The warning signs are real.

From: NorthPeak Credit Union <alerts@northpeak-secure-alerts.com>
Reply-To: help.desk@mail-northpeak-verify.net
Sent: Tuesday, 3:12 a.m.
Subject: URGENT: Unusal activity on your acount

Dear valued customer,

We detected unusal activity on your account. You must verify your identity within 24 hours or your account will be permanently suspended.

Please click the link below and kindly confirm your online banking password and card PIN so we can recieve your verification.

https://www.northpeak.ca/secure-login

(Hovering reveals the real destination: http://northpeak-login.verify-now.example/x7)

Attachment: Account-Statement.zip

Thank you,
Security Team

Find the red flags (there are 8). Write what you spot:

  1.  
  2.  
  3.  
  4.  
  5.  
  6.  
  7.  
  8.  

Puzzle by Tachyon Business & Computer Solutions Β· Vernon, BCwebitpartner.caQuestions about your IT or security? Get in touch.