Themessageincluded anexecutablefile (.exe)You wereasked tosend orredeem a giftcardYou receivedan email for ajob opportunityyou didn’tapply forYour “boss”asked you tosend themsensitivecompanyinformationYou receiveda messagefrom farawayroyaltyThe messageincluded astrange filefor you todownloadYour “streamingservice”threatened toclose youraccountYou receiveda link to tracka packagethat youdidn’t orderYour “bank”threatenedto close youraccountYour long-lost,never-before-seen relativecontacted youto offer aninheritanceYou wereoffered afreevacationThe emailaddress camefrom a personalaccount insteadof a companyaccountThecompany’sname wasmisspelled inthe messageThe emailbegan with“FWD” or“RE: RE:RE:”The sender’semail addresscontainedrandomnumbers andcharactersThere werenoticeablespellingmistakes inthe emailThecompany’slogo waspixelated inthe messageYou “won” acontest orlottery youneverenteredYou wereasked to investin digitalcurrency likeBitcoinYour account was“locked” and youwere told to enterpersonalinformation tounlock itYou receiveda “payment”to collect ane-transfer ortax paymentYou received asocial mediarequest from aperson you’realreadyconnected withSomeonethreatenedto take legalactionagainst you You werecontacted by“thegovernment”Themessageincluded anexecutablefile (.exe)You wereasked tosend orredeem a giftcardYou receivedan email for ajob opportunityyou didn’tapply forYour “boss”asked you tosend themsensitivecompanyinformationYou receiveda messagefrom farawayroyaltyThe messageincluded astrange filefor you todownloadYour “streamingservice”threatened toclose youraccountYou receiveda link to tracka packagethat youdidn’t orderYour “bank”threatenedto close youraccountYour long-lost,never-before-seen relativecontacted youto offer aninheritanceYou wereoffered afreevacationThe emailaddress camefrom a personalaccount insteadof a companyaccountThecompany’sname wasmisspelled inthe messageThe emailbegan with“FWD” or“RE: RE:RE:”The sender’semail addresscontainedrandomnumbers andcharactersThere werenoticeablespellingmistakes inthe emailThecompany’slogo waspixelated inthe messageYou “won” acontest orlottery youneverenteredYou wereasked to investin digitalcurrency likeBitcoinYour account was“locked” and youwere told to enterpersonalinformation tounlock itYou receiveda “payment”to collect ane-transfer ortax paymentYou received asocial mediarequest from aperson you’realreadyconnected withSomeonethreatenedto take legalactionagainst you You werecontacted by“thegovernment”

Phishing Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. The message included an executable file (.exe)
  2. You were asked to send or redeem a gift card
  3. You received an email for a job opportunity you didn’t apply for
  4. Your “boss” asked you to send them sensitive company information
  5. You received a message from faraway royalty
  6. The message included a strange file for you to download
  7. Your “streaming service” threatened to close your account
  8. You received a link to track a package that you didn’t order
  9. Your “bank” threatened to close your account
  10. Your long-lost, never-before-seen relative contacted you to offer an inheritance
  11. You were offered a free vacation
  12. The email address came from a personal account instead of a company account
  13. The company’s name was misspelled in the message
  14. The email began with “FWD” or “RE: RE: RE:”
  15. The sender’s email address contained random numbers and characters
  16. There were noticeable spelling mistakes in the email
  17. The company’s logo was pixelated in the message
  18. You “won” a contest or lottery you never entered
  19. You were asked to invest in digital currency like Bitcoin
  20. Your account was “locked” and you were told to enter personal information to unlock it
  21. You received a “payment” to collect an e-transfer or tax payment
  22. You received a social media request from a person you’re already connected with
  23. Someone threatened to take legal action against you
  24. You were contacted by “the government”