Phishing, Scams, Bots, and Social Engineering

What phishing, scams, bots, and social engineering is, who it affects, and what a child should learn — a free entry from the Digital Guardians Threat Dictionary.

Target age range: All DGSS cohorts are directly relevant. TX-07 is one of the rare chapters that truly begins at the youngest band because deceptive messages target curiosity before they target technical sophistication. Younger children need a simple “tricks and pressure” frame; older youth need detection, reporting, and recovery skills that match real platforms. Cohort Primary developmental goal DGSS application in this chapter 5-7 Recognize that some messages, prizes, and requests are tricks and that trusted adults should review surprises first. Children learn to stop when a screen, caller, or message asks them to click, type, buy, or keep a secret. 8-10 Identify common scam signals such as urgency, fake rewards, secret rules, and pressure to move quickly. Children begin sorting suspicious messages and practicing the family verification routine with adult guidance. 11-13 Recognize phishing and impersonation across games, social media, school accounts, and direct messages. Tweens learn to inspect sender clues, avoid login links, reject requests for codes, and preserve evidence before deleting. 14-18 Analyze advanced manipulation tactics including account-recovery scams, fake support, romance or peer pressure, and AI-shaped voice or text deception. Teens should be able to verify independently, report abuse correctly, protect accounts after exposure, and explain why a message is risky.

Learning objective: Readers will learn how manipulative messages and fake identities work, why emotional pressure is central to most scams, how to detect deception across platforms, and how to respond without panic or shame. By the end of the chapter, a parent, educator, or older teen should be able to name the main scam patterns, use a verification workflow, report suspicious activity through the official channel, and carry out a calm recovery response if someone clicked, replied, paid, downloaded, or shared information.

Threat definition

Phishing and social engineering are attempts to manipulate people into giving up information, money, access, or cooperation by pretending to be trustworthy, urgent, helpful, familiar, or authoritative. The technology may vary, but the real target is the person’s judgment under pressure.

• Phishing: deceptive email or web prompts that try to steal credentials or make the user click, pay, or download.
• Smishing: phishing by text message or messaging app.
• Vishing: phishing by voice call, voicemail, or internet calling platform.
• Spoofing: disguising a sender name, phone number, URL, or account identity so it appears legitimate.
• Impersonation: pretending to be support staff, a school, a bank, a parent, a teammate, a company, a government office, or a friend.
• Malicious or deceptive bots: automated accounts that send links, fake offers, fake verification prompts, or server-invite traps in chat platforms and games.
• Social engineering: the larger manipulation process that uses fear, excitement, guilt, embarrassment, loyalty, secrecy, authority, or urgency to override safer decision-making.

The full chapter is in DGSS Tech & Security Guide and the Complete Edition.