The emailbegan with“FWD” or“RE: RE:RE:”There werenoticeablespellingmistakes inthe emailThemessageincluded anexecutablefile (.exe)Your “streamingservice”threatened toclose youraccountYour “bank”threatenedto close youraccountYour account was“locked” and youwere told to enterpersonalinformation tounlock itSomeonethreatenedto take legalactionagainst youYou receivedan email for ajob opportunityyou didn’tapply forYou receiveda messagefrom farawayroyaltyThe emailaddress camefrom a personalaccount insteadof a companyaccountYou wereasked to investin digitalcurrency likeBitcoinThe messageincluded astrange filefor you todownloadYou receiveda link to tracka packagethat youdidn’t orderYou wereoffered afreevacationThecompany’sname wasmisspelled inthe messageYour long-lost,never-before-seen relativecontacted youto offer aninheritanceThe sender’semail addresscontainedrandomnumbers andcharactersYou “won” acontest orlottery youneverenteredYou receiveda “payment”to collect ane-transfer ortax paymentYou received asocial mediarequest from aperson you’realreadyconnected with You werecontacted by“thegovernment”Thecompany’slogo waspixelated inthe messageYour “boss”asked you tosend themsensitivecompanyinformationYou wereasked tosend orredeem a giftcardThe emailbegan with“FWD” or“RE: RE:RE:”There werenoticeablespellingmistakes inthe emailThemessageincluded anexecutablefile (.exe)Your “streamingservice”threatened toclose youraccountYour “bank”threatenedto close youraccountYour account was“locked” and youwere told to enterpersonalinformation tounlock itSomeonethreatenedto take legalactionagainst youYou receivedan email for ajob opportunityyou didn’tapply forYou receiveda messagefrom farawayroyaltyThe emailaddress camefrom a personalaccount insteadof a companyaccountYou wereasked to investin digitalcurrency likeBitcoinThe messageincluded astrange filefor you todownloadYou receiveda link to tracka packagethat youdidn’t orderYou wereoffered afreevacationThecompany’sname wasmisspelled inthe messageYour long-lost,never-before-seen relativecontacted youto offer aninheritanceThe sender’semail addresscontainedrandomnumbers andcharactersYou “won” acontest orlottery youneverenteredYou receiveda “payment”to collect ane-transfer ortax paymentYou received asocial mediarequest from aperson you’realreadyconnected with You werecontacted by“thegovernment”Thecompany’slogo waspixelated inthe messageYour “boss”asked you tosend themsensitivecompanyinformationYou wereasked tosend orredeem a giftcard

Phishing Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. The email began with “FWD” or “RE: RE: RE:”
  2. There were noticeable spelling mistakes in the email
  3. The message included an executable file (.exe)
  4. Your “streaming service” threatened to close your account
  5. Your “bank” threatened to close your account
  6. Your account was “locked” and you were told to enter personal information to unlock it
  7. Someone threatened to take legal action against you
  8. You received an email for a job opportunity you didn’t apply for
  9. You received a message from faraway royalty
  10. The email address came from a personal account instead of a company account
  11. You were asked to invest in digital currency like Bitcoin
  12. The message included a strange file for you to download
  13. You received a link to track a package that you didn’t order
  14. You were offered a free vacation
  15. The company’s name was misspelled in the message
  16. Your long-lost, never-before-seen relative contacted you to offer an inheritance
  17. The sender’s email address contained random numbers and characters
  18. You “won” a contest or lottery you never entered
  19. You received a “payment” to collect an e-transfer or tax payment
  20. You received a social media request from a person you’re already connected with
  21. You were contacted by “the government”
  22. The company’s logo was pixelated in the message
  23. Your “boss” asked you to send them sensitive company information
  24. You were asked to send or redeem a gift card