The emailaddress camefrom a personalaccount insteadof a companyaccountThe emailbegan with“FWD” or“RE: RE:RE:”You “won” acontest orlottery youneverenteredYour “bank”threatenedto close youraccountYour account was“locked” and youwere told to enterpersonalinformation tounlock itYou receiveda link to tracka packagethat youdidn’t order You werecontacted by“thegovernment”There werenoticeablespellingmistakes inthe emailThe messageincluded astrange filefor you todownloadYou receivedan email for ajob opportunityyou didn’tapply forYou wereoffered afreevacationYou received asocial mediarequest from aperson you’realreadyconnected withYou wereasked tosend orredeem a giftcardSomeonethreatenedto take legalactionagainst youYour long-lost,never-before-seen relativecontacted youto offer aninheritanceYou wereasked to investin digitalcurrency likeBitcoinYour “streamingservice”threatened toclose youraccountYour “boss”asked you tosend themsensitivecompanyinformationYou receiveda “payment”to collect ane-transfer ortax paymentThecompany’slogo waspixelated inthe messageThecompany’sname wasmisspelled inthe messageYou receiveda messagefrom farawayroyaltyThemessageincluded anexecutablefile (.exe)The sender’semail addresscontainedrandomnumbers andcharactersThe emailaddress camefrom a personalaccount insteadof a companyaccountThe emailbegan with“FWD” or“RE: RE:RE:”You “won” acontest orlottery youneverenteredYour “bank”threatenedto close youraccountYour account was“locked” and youwere told to enterpersonalinformation tounlock itYou receiveda link to tracka packagethat youdidn’t order You werecontacted by“thegovernment”There werenoticeablespellingmistakes inthe emailThe messageincluded astrange filefor you todownloadYou receivedan email for ajob opportunityyou didn’tapply forYou wereoffered afreevacationYou received asocial mediarequest from aperson you’realreadyconnected withYou wereasked tosend orredeem a giftcardSomeonethreatenedto take legalactionagainst youYour long-lost,never-before-seen relativecontacted youto offer aninheritanceYou wereasked to investin digitalcurrency likeBitcoinYour “streamingservice”threatened toclose youraccountYour “boss”asked you tosend themsensitivecompanyinformationYou receiveda “payment”to collect ane-transfer ortax paymentThecompany’slogo waspixelated inthe messageThecompany’sname wasmisspelled inthe messageYou receiveda messagefrom farawayroyaltyThemessageincluded anexecutablefile (.exe)The sender’semail addresscontainedrandomnumbers andcharacters

Phishing Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. The email address came from a personal account instead of a company account
  2. The email began with “FWD” or “RE: RE: RE:”
  3. You “won” a contest or lottery you never entered
  4. Your “bank” threatened to close your account
  5. Your account was “locked” and you were told to enter personal information to unlock it
  6. You received a link to track a package that you didn’t order
  7. You were contacted by “the government”
  8. There were noticeable spelling mistakes in the email
  9. The message included a strange file for you to download
  10. You received an email for a job opportunity you didn’t apply for
  11. You were offered a free vacation
  12. You received a social media request from a person you’re already connected with
  13. You were asked to send or redeem a gift card
  14. Someone threatened to take legal action against you
  15. Your long-lost, never-before-seen relative contacted you to offer an inheritance
  16. You were asked to invest in digital currency like Bitcoin
  17. Your “streaming service” threatened to close your account
  18. Your “boss” asked you to send them sensitive company information
  19. You received a “payment” to collect an e-transfer or tax payment
  20. The company’s logo was pixelated in the message
  21. The company’s name was misspelled in the message
  22. You received a message from faraway royalty
  23. The message included an executable file (.exe)
  24. The sender’s email address contained random numbers and characters