Course Outline · Beginner Friendly · 2026
This short course teaches you how to stay safe online and offline. You will learn how to protect your personal information, spot common scams, and build simple habits that keep you and your family secure. No technical experience needed.
| Item | Details |
|---|---|
| Level | Beginner |
| Duration | 2 weeks · 2–3 hours per week |
| Modules | 3 modules + 1 final project |
| Tools | Any phone or computer with internet |
| Certificate | Yes, after the final project |
This course contains 3 modules plus a final project.
Learn what security awareness is and why it matters for everyone.
Explain security awareness and list basic safety habits.
Learn how to protect your accounts with strong passwords and extra security.
Create strong passwords and turn on 2FA on your accounts.
Learn how to spot phishing, scams, and unsafe websites before it is too late.
Identify phishing and scams, and respond safely.
Create a short guide to help your family and friends stay safe online. Your guide should include:
Present your guide to your family or class. This becomes your portfolio piece.
After this course, you can continue to Introduction to Cybersecurity Tools, where you will learn about the tools used by security professionals.
Security Awareness Fundamentals · Beginner Level · 2026
Welcome to the first module of Security Awareness Fundamentals. This is the beginning of a very important journey. By the end of this module, you will understand what security awareness means and why it matters for everyone.
Have you ever locked your door before going out? Have you ever kept your money in a safe place? Have you ever warned a friend not to share your secret? If yes, then you already understand the idea behind security awareness. You were being careful with what matters to you.
Security awareness means knowing the dangers around you and taking simple steps to stay safe. In the digital world, these dangers come from bad people who want your money, your private messages, and your personal information.
Many people think they are too small or too unimportant to be attacked. That is not true. Cyber criminals attack everyone — students, parents, teachers, traders, and even children. The good news is that simple habits can stop most attacks.
This module is written for complete beginners. You do not need to know any coding. Every new word is explained in very simple language. Every idea comes with examples from real life, school, home, and Nigeria. So relax, read slowly, and let us begin.
YOUR LEARNING JOURNEY IN MODULE 1
=================================
[ Start ]
|
V
What is Security Awareness?
|
V
Why Everyone is a Target
|
V
The Cost of Small Mistakes
|
V
Common Cyber Threats
|
V
Simple Habits to Stay Safe
|
V
[ You understand security awareness! ]
This module introduces security awareness. You will learn what it means, why it matters, what threats exist, and how to stay safe. Everything is explained in simple language with plenty of examples.
By the end of this module, you will be able to:
You will learn what security awareness is, why it matters, the main threats, and how to stay safe online and offline.
Ngozi is a 12-year-old girl who lives in Enugu. She loves using her mother's phone to watch videos and chat with her friends.
One Saturday morning, a message popped up on the phone.
"Congratulations! You have won ₦100,000. Click this link to claim your prize."
Ngozi was excited. "Mama! Mama! We won ₦100,000!" she shouted.
Her mother came quickly. "Let me see."
She looked at the message carefully. Then she frowned.
"Ngozi, this is a scam," she said.
"But Mama, it says we won money!"
"Yes, but look closely. It says click the link. If we click, they will ask for our bank details. Then they will steal our money."
Ngozi was confused. "But how do you know it is fake?"
Her mother pointed at the message. "Look at the sender's number. It is not a real number. Look at the spelling mistakes. Look at how they are rushing us to click. Real prizes do not work like this."
Ngozi nodded slowly. She had almost fallen for the scam. Her mother had taught her something important: not everything online is real.
Later that day, Ngozi told her friends at school about the fake message. Two of her friends said they had received similar messages. One of them had clicked the link. Luckily, her father had noticed and stopped her before she entered any details.
Ngozi learned two big lessons. First, scams are everywhere. Second, being careful can save you from losing money. That is what security awareness is all about.
NGOZI'S STORY
=============
[ Fake prize message arrives ]
|
V
[ Ngozi gets excited ]
|
V
[ Mother checks carefully ]
|
V
[ Identifies it as a scam ]
|
V
[ Ngozi learns: not everything online is real ]
Ngozi almost fell for a fake prize message. Her mother spotted the signs of a scam and explained them. This story shows why security awareness matters for everyone.
In this section, you will go through 12 short lessons. Each lesson teaches one big idea. Each lesson ends with a mini summary. Read slowly. Think about the examples. Ask questions. That is how you learn.
Security awareness means knowing the dangers around you and taking simple steps to stay safe.
Most cyber attacks succeed because of small mistakes. Security awareness stops those mistakes.
Think of crossing a road. You look left, look right, and listen for cars. You are being careful. Security awareness is being careful online.
Before clicking a link, you check if it looks safe. That is security awareness.
Before sharing your password with a friend, you think twice. That is security awareness.
Before answering a strange call, you check the number. That is security awareness.
Before entering your PIN on a POS machine, you cover your hand. That is security awareness.
SECURITY AWARENESS IS LIKE CROSSING A ROAD ========================================== [ Stop ] -> [ Look left ] -> [ Look right ] -> [ Cross safely ] Same online: [ Stop ] -> [ Check the message ] -> [ Check the link ] -> [ Act safely ]
Security awareness means knowing dangers and taking simple steps to stay safe. It is being careful online and offline.
A target is someone that bad people want to attack. Everyone with a phone or computer is a target.
Many people think "I am not important enough to be attacked." That is false. Cyber criminals attack anyone they can.
Think of a thief. They do not only steal from rich houses. They steal from any house with an open window. Cyber criminals are the same.
A student receives a fake message asking for their bank details. Even students are targets.
A school's exam portal is attacked to change scores. Schools are targets too.
A family's WhatsApp account is hacked. Families are targets too.
Every day, thousands of Nigerians receive scam messages, even if they have only ₦500 in their accounts.
EVERYONE IS A TARGET
====================
[ Students ]
[ Parents ]
[ Traders ]
[ Teachers ]
[ Children ]
[ Grandparents ]
|
V
[ Cyber criminals attack everyone ]
Everyone is a target. No one is too small or too unimportant to be attacked.
A small mistake is a tiny error that can cause big problems. Online, small mistakes can cost a lot of money.
Most cyber attacks succeed because of small mistakes like clicking a strange link or sharing a password.
Think of leaving your door unlocked for five minutes. A thief can enter and steal everything. Small mistakes online work the same way.
Clicking one fake link can empty a bank account in minutes.
Sharing your exam portal password can let someone change your scores.
Sharing your OTP with a stranger can cost your family all their savings.
Many Nigerians have lost millions of naira because of one wrong click.
SMALL MISTAKES, BIG PROBLEMS
============================
[ Small mistake: Click one link ]
|
V
[ Big problem: Money stolen from bank account ]
Small mistakes can cause big problems. One wrong click can cost you everything.
Cyber threats are the different ways bad people try to attack you online. Some are simple. Some are clever.
Knowing the threats helps you spot them before it is too late.
Think of wild animals in a forest. If you know which ones are dangerous, you can stay safe. Cyber threats are the wild animals of the internet.
You receive an email that says, "You won ₦1,000,000. Click here to claim." It is phishing.
A student receives a message that says, "Your exam score is out. Click this link." The link is fake.
A family receives a call saying, "We are from your bank. Please confirm your PIN." It is a scam.
"Yahoo boys" use phishing emails and fake websites to steal money from people around the world.
COMMON CYBER THREATS ==================== Phishing: [ Fake message ] -> [ You click ] -> [ Password stolen ] Malware: [ Bad download ] -> [ Device infected ] -> [ Data lost ] Ransomware: [ Files locked ] -> [ Payment demanded ] -> [ Big problem ] Scams: [ Fake prize ] -> [ You pay ] -> [ Money gone ]
Cyber threats include phishing, malware, ransomware, scams, identity theft, and fake websites. Learn to spot them.
Phishing is when a bad person sends a fake message that pretends to be real. They want you to click a link or share your password.
Phishing is the most common way cyber criminals attack people. Knowing how to spot it protects you.
Think of a fisherman. They throw bait to catch fish. Phishing is the same. The bad person throws fake messages to catch you.
You receive an email from "your bank" asking you to click a link to "verify your account." The email is fake.
A student receives an email that says, "Click here to see your exam results." The email is fake.
Your family receives an SMS that says, "Your DSTV subscription has expired. Click here to renew." The link is fake.
Many Nigerians receive fake SMS messages from "their bank" asking them to update their details. These are phishing messages.
SPOTTING PHISHING ================= [ Sender? ] -> Strange [ Greeting? ] -> General [ Urgency? ] -> Very high [ Link? ] -> Strange [ Spelling? ] -> Bad => Phishing. Do not click.
Phishing is a fake message pretending to be real. Learn the signs so you do not fall for it.
Malware is bad software that harms your device or steals your data. The word comes from "malicious software".
Malware can slow your phone, steal your information, or lock your files.
Think of a small insect that enters your food and spoils it. Malware enters your device and spoils it.
You download a free game from a strange website. Your phone starts acting strangely. It has malware.
A student inserts a strange USB drive into a school computer. The computer gets infected.
Your family downloads a fake app. It steals your contacts.
Some fake "loan apps" in Nigeria are actually malware. They steal contacts and threaten users.
MALWARE ENTERS YOUR DEVICE
==========================
[ Bad download ] -> [ Device infected ]
|
V
[ Data stolen / Files locked ]
Malware is bad software that harms your device or steals your data. Avoid strange downloads.
A scam is a trick to get your money or information. Scammers pretend to be someone they are not.
Scams are everywhere. They come by SMS, email, phone call, and social media.
Think of a stranger who says, "Give me ₦1,000 and I will give you ₦10,000." You know it is a lie. Online scams are the same.
A person receives a message: "You have won a car. Send ₦5,000 for delivery." It is a scam.
A student receives a message: "Your exam score can be changed for ₦10,000." It is a scam.
A family receives a call: "Your son is in trouble. Send money now." It is a scam.
"Yahoo boys" and "419" scammers use fake emails and messages to steal money from people around the world.
COMMON SCAMS
============
[ Fake prize ]
[ Fake job ]
[ Fake loan ]
[ Fake romance ]
[ Fake bank message ]
|
V
[ They all want your money or information ]
Scams are tricks to get your money or information. They come in many forms. Learn to spot them.
Personal information is data that identifies you. It includes your name, age, address, phone number, and bank details.
If bad people get your personal information, they can steal your money or pretend to be you.
Think of your school ID card. It has your name and photo. That is personal information. Keep it safe.
Never share your bank account details with a stranger online.
Do not share your exam number or portal password with classmates.
Do not share your family's address with strangers on social media.
Never share your BVN, OTP, or PIN. Nigerian banks will never ask for them by phone or message.
PERSONAL INFORMATION ==================== [ Name ] [ Age ] [ Address ] [ Phone ] [ Bank details ] [ BVN ] [ Passwords ] Keep all of this private.
Personal information is data that identifies you. Keep it private. Never share it with strangers.
Safe habits are simple actions you take every day to protect yourself online.
Most attacks succeed because of small mistakes. Safe habits stop them.
Think of brushing your teeth. You do it every day without thinking. Safe online habits should be the same.
A strong password like "Bright-Falcon-47-Jump" is better than "1234".
A student who never clicks strange links will never fall for phishing.
A family that updates its Wi-Fi password every few months is safer.
Never share your OTP with anyone, even if the caller says they are from your bank.
SAFE HABITS =========== Strong password -> Yes Password reuse -> Never Two-factor -> Always Strange links -> Never click Updates -> Always Sharing your OTP -> Never
Safe habits are simple actions you take every day. They stop most attacks.
Security awareness is not only for big companies. It touches your daily life too.
Every time you use a phone, you are practising or ignoring security awareness.
Think of your daily routine. You lock your door, keep your money safe, and protect your secrets. Security awareness is the same idea for your phone.
When you use a fingerprint to unlock your phone, that is security awareness.
When a student ignores a fake exam-result message, that is security awareness.
When your Wi-Fi router uses a password, that is security awareness.
When you use USSD to buy airtime and cover your PIN, that is security awareness.
SECURITY AWARENESS IN DAILY LIFE ================================ Phone lock -> Yes Bank PIN -> Yes Email password -> Yes Wi-Fi password -> Yes OTP before transfer -> Yes You use security awareness every day!
Security awareness is part of daily life. Every password, PIN, and OTP is a form of protection.
Security awareness matters because it protects you, your family, and your money from bad people.
Without awareness, you will fall for scams. With awareness, you can spot them early.
Think of a seat belt in a car. It takes one second to wear, but it saves lives. Security awareness is a seat belt for your digital life.
A person who knows about phishing will not lose money to a fake bank message.
Students who know about security awareness will not fall for fake exam-result scams.
Families that know about OTPs will not share them with strangers.
Nigerians who learn security awareness protect themselves from bank fraud and online scams.
WHY SECURITY AWARENESS MATTERS ============================== [ Awareness ] -> [ You spot scams ] -> [ You stay safe ] [ No awareness ] -> [ You fall for scams ] -> [ You lose money ]
Security awareness protects your money, your information, and your family.
A security awareness champion is someone who stays safe online and teaches others to do the same.
When you teach others, they stay safe too. The whole community becomes stronger.
Think of a good football captain. They play well and help their teammates play well too. A champion does the same for security awareness.
A student teaches their parents how to spot phishing. The parents are safer.
A student shares safety tips in class. The whole class becomes safer.
A family member teaches a grandparent not to share their OTP. The grandparent is protected.
Nigerian students teach their parents and neighbours about banking scams. The community becomes safer.
SECURITY AWARENESS CHAMPION
===========================
[ Practise safe habits ]
|
V
[ Teach family and friends ]
|
V
[ Report scams ]
|
V
[ Ask before clicking ]
|
V
[ Whole community safer! ]
A security awareness champion practises safe habits and teaches others. Everyone becomes safer.
| Word | Simple Definition |
|---|---|
| Security awareness | Knowing dangers and taking steps to stay safe. |
| Target | Someone bad people want to attack. |
| Cyber threat | A way bad people try to attack you online. |
| Phishing | A fake message that asks for your password or money. |
| Malware | Bad software that harms your device. |
| Ransomware | Bad software that locks your files. |
| Scam | A trick to get your money or information. |
| Personal information | Data that identifies you, like your name or address. |
| Password | A secret word that keeps your account safe. |
| PIN | A secret number used to protect your card or phone. |
| OTP | One-Time Password, sent to confirm actions. |
| 2FA | Two-Factor Authentication, extra security for your account. |
| BVN | Bank Verification Number, a unique ID for bank customers. |
| Safe habit | A simple action you take to stay safe. |
| Champion | Someone who stays safe and teaches others. |
These words are the foundation of security awareness. Use them often so they become easy.
No one is too small or too unimportant. Everyone with a phone or computer is a target.
One wrong click can cost money or privacy. Be careful.
Many messages, prizes, and jobs are fake. Check before you click.
Your name, address, PIN, OTP, and BVN must never be shared with strangers.
Strong passwords, 2FA, and careful clicking protect you every day.
These five concepts are the heart of Module 1. Read them again before moving on.
SPOTTING PHISHING ================= [ Sender? ] -> Strange [ Greeting? ] -> General [ Urgency? ] -> Very high [ Link? ] -> Strange [ Spelling? ] -> Bad => Phishing. Do not click.
CREATING A STRONG PASSWORD ========================== [ Word 1 ] -> Bright [ Word 2 ] -> Falcon [ Word 3 ] -> Jump [ Number ] -> 47 Result: Bright-Falcon-Jump-47
IF YOU FALL FOR A SCAM
======================
[ Change passwords ]
|
V
[ Turn on 2FA ]
|
V
[ Call your bank ]
|
V
[ Report the scam ]
|
V
[ Warn your family ]
Spotting phishing, creating strong passwords, and responding to scams follow simple steps. Follow them, and you are safer.
A student receives a fake exam-result message and ignores it. They avoid a scam.
A parent receives a fake bank message and calls the bank directly. They avoid losing money.
A trader receives a fake prize SMS and deletes it. They stay safe.
A grandparent receives a fake bank call and hangs up. They stay safe.
A family uses strong passwords and 2FA. They stay safe online.
Security awareness protects students, parents, traders, grandparents, and families.
Many Nigerians receive fake SMS from "their bank". These are phishing messages.
Some loan apps in Nigeria are malware. They steal contacts and threaten users.
Many Nigerians receive fake job offers on WhatsApp. They ask for money upfront.
"Yahoo boys" sometimes pretend to be in love to steal money from victims.
Many Nigerians receive messages saying they have won prizes. They are scams.
Nigeria has many examples of scams. Learning to spot them is essential.
You would not take candy from a stranger. Do not click strange links either.
If someone offers you a free bike for a small fee, it is a scam. Same online.
You keep your diary private. Keep your passwords private too.
You lock your door at night. Lock your phone with a PIN too.
A careful driver watches the road. Be careful online too.
Security awareness is like everyday safety. Candy from strangers, free bikes, diaries, locked doors, and careful driving all teach the same lesson.
| Situation | Security Awareness Idea |
|---|---|
| Locking your phone | Protecting your data |
| Using a bank PIN | Protecting your money |
| Checking an email link | Avoiding phishing |
| Updating your apps | Fixing security holes |
| Using an OTP | Confirming your identity |
Even simple daily actions use security awareness. Now you can see it everywhere.
Parents can teach security awareness at home through daily conversations and simple examples.
Security awareness is powerful. Simple knowledge stops most attacks.
Security awareness is full of surprises. The more you learn, the safer you become.
These ten points are the heart of Module 1. Read them again before moving on.
Avoiding these mistakes will keep you safer online than many adults.
These ten habits will protect you, your family, and your friends.
SECURITY AWARENESS IS LIKE CROSSING A ROAD ========================================== [ Stop ] -> [ Look left ] -> [ Look right ] -> [ Cross safely ] Same online: [ Stop ] -> [ Check the message ] -> [ Check the link ] -> [ Act safely ]
EVERYONE IS A TARGET
====================
[ Students ]
[ Parents ]
[ Traders ]
[ Teachers ]
[ Children ]
[ Grandparents ]
|
V
[ Cyber criminals attack everyone ]
SMALL MISTAKES, BIG PROBLEMS
============================
[ Small mistake: Click one link ]
|
V
[ Big problem: Money stolen from bank account ]
SPOTTING PHISHING ================= [ Sender? ] -> Strange [ Greeting? ] -> General [ Urgency? ] -> Very high [ Link? ] -> Strange [ Spelling? ] -> Bad => Phishing. Do not click.
SAFE HABITS =========== Strong password -> Yes Password reuse -> Never Two-factor -> Always Strange links -> Never click Updates -> Always Sharing your OTP -> Never
SECURITY AWARENESS CHAMPION
===========================
[ Practise safe habits ]
|
V
[ Teach family and friends ]
|
V
[ Report scams ]
|
V
[ Ask before clicking ]
|
V
[ Whole community safer! ]
These diagrams help you see security awareness clearly. Draw them yourself to remember them better.
| Real Website | Phishing Site |
|---|---|
| Official address (like gtbank.com) | Strange address (like gtbank-secure.com) |
| Correct spelling | Spelling mistakes |
| No urgency | "Act now!" or "Urgent!" |
| Never asks for PIN or OTP | Asks for PIN or OTP |
| Safe Habit | Unsafe Habit |
|---|---|
| Strong, unique passwords | Same password everywhere |
| 2FA turned on | 2FA turned off |
| Check links before clicking | Click without thinking |
| Keep personal info private | Share personal info freely |
| Real Prize | Scam Prize |
|---|---|
| You entered a competition | You did not enter anything |
| No payment needed | You must pay a small fee |
| Official contact | Strange sender |
| Clear process | "Click this link now!" |
Comparing ideas side by side helps you remember the differences clearly.
| Lesson | Main Idea |
|---|---|
| Lesson 1 | Security awareness means being careful online and offline. |
| Lesson 2 | Everyone is a target. |
| Lesson 3 | Small mistakes cause big problems. |
| Lesson 4 | Common threats include phishing, malware, and scams. |
| Lesson 5 | Phishing is a fake message pretending to be real. |
| Lesson 6 | Malware is bad software that harms your device. |
| Lesson 7 | Scams are tricks to get your money or information. |
| Lesson 8 | Personal information must be kept private. |
| Lesson 9 | Safe habits stop most attacks. |
| Lesson 10 | Security awareness is part of everyday life. |
| Lesson 11 | Security awareness protects your money and family. |
| Lesson 12 | Anyone can become a security awareness champion. |
Congratulations! You have completed Module 1. Let us review what you have learned.
You began by learning that security awareness means knowing dangers and taking simple steps to stay safe.
You discovered that everyone is a target. No one is too small or too unimportant.
You learned that small mistakes — like clicking one link — can cause big problems.
You explored the most common cyber threats: phishing, malware, ransomware, and scams.
You studied phishing — fake messages that try to steal your password or money.
You learned about malware — bad software that harms your device.
You discovered scams — tricks that promise fake prizes or jobs.
You learned that personal information like your PIN, BVN, and OTP must never be shared.
You explored safe habits — strong passwords, 2FA, and careful clicking.
You saw how security awareness is part of everyday life.
You learned why security awareness matters — it protects your money, family, and information.
Finally, you learned how to become a security awareness champion.
MODULE 1 SUMMARY MAP
====================
[ What is Security Awareness? ]
|
V
[ Everyone is a Target ] -> [ Small Mistakes, Big Problems ]
|
V
[ Phishing ] -> [ Malware ] -> [ Scams ]
|
V
[ Personal Info ] -> [ Safe Habits ] -> [ Champion! ]
Well done! You now have a strong foundation. In Module 2, you will learn about passwords and account security in detail.
Security awareness means knowing dangers and taking simple steps to stay safe.
Because cyber criminals attack anyone they can, no matter how old or rich or famous.
Phishing is a fake message that pretends to be real, to trick you into giving your password or money.
Malware is bad software that harms your device or steals your data.
A scam is a trick to get your money or information.
Personal information is data that identifies you, like your name, address, phone number, PIN, and BVN.
Never. Not with anyone, even if they say they are from your bank.
Two-Factor Authentication. It adds a second step to log in, making your account safer.
Change your passwords, turn on 2FA, call your bank, and report the scam.
You will learn about passwords and account security in detail.
| Column A (Word) | Column B (Meaning) |
|---|---|
| 1. Phishing | A. Bad software |
| 2. Malware | B. A fake message asking for your password |
| 3. Scam | C. Data that identifies you |
| 4. Personal Information | D. Knowing dangers and staying safe |
| 5. Security Awareness | E. A trick to get your money |
Answers: 1-B, 2-A, 3-E, 4-C, 5-D
| Column A (Habit) | Column B (Purpose) |
|---|---|
| 1. Strong password | A. Extra login step |
| 2. 2FA | B. Keep account safe |
| 3. Checking links | C. Avoid phishing |
| 4. Updates | D. Fix security holes |
Answers: 1-B, 2-A, 3-C, 4-D
Matching helps you connect words to meanings quickly.
A student receives a message: "You have won ₦50,000! Click this link to claim."
Questions:
A girl uses the same password for her email, school portal, and game account. One day, her email is hacked.
Questions:
A man receives a phone call. The caller says, "I am from your bank. Please confirm your OTP." The man is about to give it.
Questions:
These scenarios help you apply what you have learned to real situations.
Group size: 3–5 students
Time: 40 minutes
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To practise teaching security awareness in a fun way.
Time: 20 minutes
Materials: Notebook, pencil
Instructions:
Goal: To create your own security awareness plan.
Time: 1–2 hours
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To teach others what you have learned.
Time: 1 week
Materials: Notebook, pencil
Instructions:
Goal: To see how real people handle security awareness.
You have finished Module 1. Well done! Here is how to prepare for Module 2, which is all about Passwords and Account Security.
TRANSITION TO MODULE 2
======================
[ Module 1: Security Awareness Basics ]
|
V
[ Module 2: Passwords and Account Security ]
|
V
[ You will learn: strong passwords, password reuse,
2FA, password managers, and shared device safety ]
See you in Module 2. Keep thinking like a security awareness champion!
End of Module 1 — Security Awareness Basics
⬅ Back to Course Outline | Go to Module 2 ➡
Security Awareness Fundamentals · Beginner Level · 2026
Security Awareness Fundamentals · Beginner Level · 2026
Welcome to Module 2. In Module 1, you learned what security awareness is. You learned that everyone is a target. You learned about phishing, malware, scams, and personal information. You also learned simple habits to stay safe.
Now we go one step further. You will learn how to protect your accounts. Your accounts are the doors to your digital life. Your email, your bank, your social media — all of them have doors. Passwords are the keys to those doors.
If your password is weak, anyone can open the door. If your password is strong, the door stays locked. But passwords alone are not enough. You also need Two-Factor Authentication (2FA). Think of it as a second lock on the same door.
In this module, you will learn how to create strong passwords. You will learn why reusing the same password is dangerous. You will learn how to turn on 2FA. You will also learn about password managers and how to keep your accounts safe on shared devices.
This module is written for complete beginners. You do not need to know any coding. Every new word is explained in very simple language. Every idea comes with examples from real life, school, home, and Nigeria. So relax, read slowly, and let us begin.
YOUR LEARNING JOURNEY IN MODULE 2
=================================
[ Start ]
|
V
What is a Password?
|
V
What Makes a Password Strong?
|
V
Why Password Reuse is Dangerous
|
V
Two-Factor Authentication (2FA)
|
V
Password Managers
|
V
Shared Device Safety
|
V
[ You know how to protect your accounts! ]
This module teaches you how to protect your accounts. You will learn about strong passwords, 2FA, password managers, and shared device safety.
By the end of this module, you will be able to:
You will learn how to create strong passwords, avoid password reuse, turn on 2FA, use password managers, and stay safe on shared devices.
Tunde is a 12-year-old boy who lives in Ibadan. He has a bicycle that he loves very much. Every day, he rides it to school and back.
Tunde's father bought him a bicycle lock. It was a small, simple lock with the combination "1234". Tunde loved it because it was easy to remember.
One day, Tunde went to the market with his mother. He locked his bicycle outside the market. When he came back, the bicycle was gone.
"Papa! Papa! My bicycle has been stolen!" Tunde cried.
His father came quickly. "Did you lock it?"
"Yes! With the lock you gave me."
His father looked sad. "Tunde, the combination was 1234. That is the first combination any thief will try."
Tunde was shocked. "But it was easy to remember!"
"Yes," his father said. "But easy to remember is also easy to guess. Next time, we will use a lock with a stronger combination."
The next week, Tunde's father bought a new bicycle. This time, the lock had a combination of six numbers: "824917". It was harder to remember, but Tunde practised until he knew it.
"Now," his father said, "even if a thief tries, they cannot guess this combination. Your bicycle is safe."
Tunde learned a very important lesson. Simple and easy is not always safe. The same is true for passwords.
TUNDE'S BICYCLE LOCK ==================== [ Weak lock: 1234 ] -> [ Thief guesses quickly ] -> [ Bicycle stolen ] [ Strong lock: 824917 ] -> [ Thief cannot guess ] -> [ Bicycle safe ]
Tunde's bicycle was stolen because his lock combination was too simple. His father explained that easy-to-remember is also easy-to-guess. This story introduces the whole module.
In this section, you will go through 12 short lessons. Each lesson teaches one big idea. Each lesson ends with a mini summary. Read slowly. Think about the examples. Ask questions. That is how you learn.
A password is a secret word or phrase that keeps your account safe. Only you should know it.
Passwords are the keys to your accounts. Without them, anyone could open your email, bank, or social media.
Think of your house key. Only you have a copy. A password is the key to your digital house.
Your email password keeps your messages safe. Your bank password keeps your money safe.
Your school portal password keeps your results safe.
Your Wi-Fi password keeps strangers from using your internet.
Your bank app password keeps your money safe from fraudsters.
PASSWORD IS A KEY ================= [ Password ] -> [ Opens your account ] Like a house key: [ Key ] -> [ Opens your house ]
A password is a secret word that keeps your account safe. Only you should know it.
A strong password is a password that is hard for others to guess. It is long, mixed, and unique.
Weak passwords are easy to guess. Strong passwords protect your accounts.
Think of a lock. A simple lock is easy to break. A strong lock is very hard to break. Passwords are the same.
"12345678" is weak. "Bright-Falcon-Jump-47" is strong.
A student who uses "school2026" is weak. A student who uses "Blue-Table-8-Cloud" is strong.
Your Wi-Fi password should be long, mixed, and unique.
Never use your phone number or birthday as a password. Fraudsters try these first.
WEAK vs STRONG PASSWORDS ======================== Weak: 123456 Weak: password Weak: Tunde2015 Strong: Bright-Falcon-Jump-47 Strong: Blue-Table-8-Cloud Strong: Mango-Tree-9-River
A strong password is long, mixed, and unique. It is hard to guess but easy for you to remember.
Password reuse means using the same password on many accounts. It is dangerous.
If one account is hacked, all your accounts become vulnerable. The hacker tries the same password everywhere.
Think of using the same key for your house, your car, and your shop. If a thief steals the key, they can open everything.
If your Facebook password is the same as your bank password, one hack exposes everything.
If your school portal password is the same as your email password, one hack can ruin both.
If your Wi-Fi password is the same as your bank password, one leak can cost you money.
Many Nigerians have lost money because they used the same password for email, bank, and social media.
PASSWORD REUSE
==============
[ Same password on email ] -> HACKED
|
V
[ Same password on bank ] -> MONEY STOLEN
|
V
[ Same password on social media ] -> ACCOUNT HIJACKED
Password reuse is dangerous. Use a different password for each account.
Creating a strong password means choosing words and numbers that are hard to guess but easy for you to remember.
You need a strong password for every account. Learning how to make them is a key skill.
Think of a recipe. You mix a few ingredients. A strong password mixes a few words.
"Mango-Tree-9-River" is strong. "Tunde2015" is weak.
"Blue-Book-7-Pencil" is strong.
"Sun-Moon-4-Star" is strong.
"Jollof-Rice-6-Plate" is strong and easy for a Nigerian to remember.
CREATING A STRONG PASSWORD ========================== [ Word 1 ] -> Mango [ Word 2 ] -> Tree [ Number ] -> 9 [ Word 3 ] -> River Result: Mango-Tree-9-River
Create strong passwords by joining unrelated words with dashes, adding numbers, and keeping them long.
Two-Factor Authentication (2FA) is an extra security step. It means you need two things to log in — your password and a second code.
Even if someone steals your password, they cannot log in without the second code.
Think of a bank vault. You need a key and a secret code. A password is the key. 2FA is the code.
When you log in to your bank, you enter your password and then an OTP. That is 2FA.
Some school portals send a code to your email to confirm logins.
Your Google account sends a code to your phone when you log in on a new device.
Nigerian banks send OTPs before you send money. That is 2FA.
TWO-FACTOR AUTHENTICATION ========================= [ Step 1: Password ] -> [ Step 2: Code ] -> [ You are in! ] Without the code, no one can enter.
2FA adds a second step to login. It stops hackers even if they have your password.
Turning on 2FA means activating the second security step on your accounts.
2FA is one of the strongest ways to protect your accounts. It takes just a few minutes.
Think of adding a second lock to your door. It is easy to add and makes your home much safer.
On Gmail, go to Security Settings and turn on 2FA.
Some school portals allow students to add 2FA.
Turn on 2FA for your family's email accounts.
Most Nigerian bank apps use 2FA by default.
TURNING ON 2FA ============== Settings -> Security -> 2FA -> Turn On -> Choose method -> Save codes
Turning on 2FA takes a few minutes. Do it for every important account.
A password manager is an app or service that stores all your passwords safely. You only need to remember one master password.
With a password manager, you can use a different strong password for every account without memorising them all.
Think of a safe where you keep all your keys. Only you have the code to the safe. A password manager is that safe for your passwords.
You use a password manager to store your bank, email, and school passwords.
A student uses Google Password Manager to remember portal and email passwords.
Your family uses Bitwarden to share some passwords safely.
Many Nigerians use Google Password Manager on their phones.
PASSWORD MANAGER
================
[ Master Password ] -> [ Password Manager ]
|
V
[ Bank password ]
[ Email password ]
[ School password ]
[ All safe ]
You remember only the master password.
A password manager stores all your passwords safely. You only remember one master password.
A shared device is a phone or computer used by more than one person. Using it safely is very important.
If you do not log out, the next person can see your email, bank, or messages.
Think of a shared bedroom. You would not leave your diary open. Do not leave your accounts open either.
A student uses a school computer and logs out after checking email.
Students log out of the school portal after checking results.
Your family uses a shared laptop. Everyone logs out after use.
People in cybercafés must log out after using shared computers.
SHARED DEVICE SAFETY ==================== [ Log in ] -> [ Use ] -> [ Log out! ] Do not leave your account open.
On shared devices, always log out and never save passwords. The next user should not see your accounts.
Password mistakes are common errors that make your accounts easy to hack.
Avoiding mistakes protects your accounts. Most hacks start with simple password mistakes.
Think of leaving your house key under the mat. Everyone knows where to find it. Password mistakes are the same.
A student uses "Tunde2015" for everything. A hacker guesses it in seconds.
A student shares their portal password with a friend. The friend changes their scores.
Your family uses "123456" as the Wi-Fi password. Neighbours use your internet.
Using your phone number as a password is very common. Fraudsters try it first.
COMMON PASSWORD MISTAKES ======================== [ "password" ] [ "123456" ] [ Your name ] [ Your birthday ] [ Same password everywhere ] All are easy to guess.
Avoid common password mistakes like using simple words, your name, or reusing passwords.
Hackers use many tricks to guess passwords. Knowing their tricks helps you stay safe.
If you know how they guess, you can make it much harder for them.
Think of a thief who tries every door in a building. Hackers try common passwords first.
A hacker sees a birthday post on Facebook. They try "Tunde2015". It works.
A hacker sees a student's school name and class. They try "JSS3student". It works.
A hacker sees a family photo with a pet. They try the pet's name as the Wi-Fi password.
Fraudsters try phone numbers as bank PINs. That is why you must not use them.
HOW HACKERS GUESS PASSWORDS
===========================
[ Common passwords ]
[ Dictionary words ]
[ Names and birthdays ]
[ Reused passwords ]
[ Social media clues ]
|
V
[ If your password is weak, they succeed ]
Hackers guess passwords using common words, names, birthdays, and leaked data. Strong unique passwords stop them.
If someone steals your password, they can access your account. You must act quickly.
Fast action reduces the damage. You can stop the hacker before they cause harm.
Think of losing your house key. You change the lock immediately. Changing your password is the same.
A student's email is hacked. They change the password and turn on 2FA.
A student's portal password is stolen. They change it and inform the teacher.
Your family's Wi-Fi password is leaked. You change it immediately.
If your bank account is hacked, call your bank immediately and change your PIN and password.
IF YOUR PASSWORD IS STOLEN
==========================
[ Change password ]
|
V
[ Turn on 2FA ]
|
V
[ Change other accounts ]
|
V
[ Check activity ]
|
V
[ Report if needed ]
If your password is stolen, act fast. Change it, turn on 2FA, and check for strange activity.
A password champion is someone who uses strong passwords, 2FA, and teaches others to do the same.
When you teach others, they stay safe too. Your family and friends become safer.
Think of a good captain. They play well and help the team play well. A password champion does the same for their family.
A student teaches their parents about 2FA. The parents are safer.
A student helps classmates create strong passwords.
A family member teaches a grandparent not to share passwords.
Nigerian students teach their parents about banking PIN safety. The whole family is safer.
PASSWORD CHAMPION
=================
[ Strong passwords ]
|
V
[ 2FA turned on ]
|
V
[ Password manager ]
|
V
[ Teach family ]
|
V
[ Whole family safer! ]
A password champion uses strong passwords and teaches others to do the same.
| Word | Simple Definition |
|---|---|
| Password | A secret word that keeps your account safe. |
| Strong password | A long, mixed, unique password that is hard to guess. |
| Weak password | A short, simple password that is easy to guess. |
| Password reuse | Using the same password on many accounts. |
| Two-Factor Authentication (2FA) | An extra step to log in. |
| OTP | One-Time Password, sent to confirm actions. |
| Password manager | An app that stores all your passwords safely. |
| Master password | The one password you remember to unlock the password manager. |
| Shared device | A phone or computer used by more than one person. |
| Log out | To close your account on a device. |
| Dictionary attack | When a hacker tries real words as passwords. |
| Biometrics | Using your fingerprint or face to log in. |
| Backup codes | Extra codes to use if you lose access to 2FA. |
| Password champion | Someone who uses strong passwords and teaches others. |
These words are the foundation of account security. Use them often so they become easy.
Your password is the key to your account. Only you should have it.
Strong passwords are long, mixed, and unique. Simple passwords are dangerous.
If one account is hacked, reused passwords expose every other account.
Even if someone steals your password, 2FA stops them.
Use a password manager to store strong, unique passwords safely.
These five concepts are the heart of Module 2. Read them again before moving on.
CREATING A STRONG PASSWORD ========================== [ Word 1 ] -> Mango [ Word 2 ] -> Tree [ Number ] -> 9 [ Word 3 ] -> River Result: Mango-Tree-9-River
TURNING ON 2FA ============== Settings -> Security -> 2FA -> Turn On -> Choose method -> Save codes
IF PASSWORD STOLEN
==================
[ Change password ]
|
V
[ Turn on 2FA ]
|
V
[ Change other accounts ]
|
V
[ Check activity ]
|
V
[ Report ]
Creating strong passwords, turning on 2FA, and responding to hacks all follow simple steps. Follow them, and you are safer.
A student uses "Mango-Tree-9-River" for school and 2FA for email. They stay safe.
A parent uses a password manager for all family accounts.
A trader uses a different password for bank, email, and WhatsApp.
A grandparent never shares their bank PIN and uses 2FA.
A family uses strong passwords, 2FA, and a password manager.
Strong passwords and 2FA protect students, parents, traders, grandparents, and families.
Nigerian banks require strong passwords and OTPs for every transaction.
Paystack and Flutterwave use 2FA and strong passwords.
School portals use strong passwords to protect student results.
Businesses use password managers to keep their accounts safe.
Many Nigerian families now use 2FA on email and bank accounts.
Nigeria has many examples of good password habits in banks, fintechs, schools, businesses, and families.
Your secret code is your password. Do not share it with everyone.
Your diary has a lock. Your account has a password.
A treasure chest needs a key. Your account needs a strong password.
A simple bike lock is easy to break. A strong password is like a strong lock.
Your secret handshake is only for your club. Your password is only for you.
Passwords are like secret codes, locked diaries, treasure chests, bike locks, and secret handshakes.
| Situation | Password Habit |
|---|---|
| Logging into email | Strong unique password |
| Using bank app | Password + OTP (2FA) |
| Shared computer | Log out after use |
| Many accounts | Use a password manager |
| New device login | Check 2FA code |
Every login you do uses password habits. Now you can see them everywhere.
Parents can teach password and account safety at home through daily conversations.
Strong passwords and 2FA are powerful. They stop most attacks.
Passwords and account security are full of surprises. The more you learn, the safer you become.
These ten points are the heart of Module 2. Read them again before moving on.
Avoiding these mistakes will keep your accounts safer than most people.
These ten habits will protect your accounts from most attacks.
PASSWORD IS A KEY ================= [ Password ] -> [ Opens your account ] Like a house key: [ Key ] -> [ Opens your house ]
WEAK vs STRONG PASSWORDS ======================== Weak: 123456 Weak: password Weak: Tunde2015 Strong: Bright-Falcon-Jump-47 Strong: Mango-Tree-9-River
TWO-FACTOR AUTHENTICATION ========================= [ Step 1: Password ] -> [ Step 2: Code ] -> [ You are in! ]
PASSWORD MANAGER
================
[ Master Password ] -> [ Password Manager ]
|
V
[ Bank password ]
[ Email password ]
[ School password ]
SHARED DEVICE SAFETY ==================== [ Log in ] -> [ Use ] -> [ Log out! ]
IF PASSWORD STOLEN ================== [ Change password ] -> [ Turn on 2FA ] -> [ Check activity ] -> [ Report ]
These diagrams help you see password security clearly. Draw them yourself to remember them better.
| Weak | Strong |
|---|---|
| Short (under 8 characters) | Long (12+ characters) |
| Only small letters | Mixed letters, numbers, dashes |
| Uses your name or birthday | Uses unrelated words |
| Same on many sites | Different on each site |
| Without 2FA | With 2FA |
|---|---|
| Password is the only lock | Password + code |
| Hacker with password can enter | Hacker needs the code too |
| Less safe | Much safer |
| Safe Habit | Unsafe Habit |
|---|---|
| Use a password manager | Write passwords on paper |
| Log out on shared devices | Leave accounts open |
| Unique password per account | Same password everywhere |
| Turn on 2FA | Ignore 2FA |
Comparing ideas side by side helps you remember the differences clearly.
| Lesson | Main Idea |
|---|---|
| Lesson 1 | A password keeps your account safe. |
| Lesson 2 | Strong passwords are long, mixed, and unique. |
| Lesson 3 | Never reuse passwords. |
| Lesson 4 | Create strong passwords with words and numbers. |
| Lesson 5 | 2FA adds a second step to login. |
| Lesson 6 | Turning on 2FA takes a few minutes. |
| Lesson 7 | A password manager stores passwords safely. |
| Lesson 8 | Always log out on shared devices. |
| Lesson 9 | Avoid common password mistakes. |
| Lesson 10 | Hackers use clues to guess passwords. |
| Lesson 11 | Act fast if your password is stolen. |
| Lesson 12 | Anyone can become a password champion. |
Congratulations! You have completed Module 2. Let us review what you have learned.
You began by learning that a password is the key to your account. Only you should know it.
You learned what makes a password strong — long, mixed, and unique.
You discovered that password reuse is dangerous. One hack can expose all your accounts.
You explored how to create strong passwords using unrelated words and numbers.
You learned about Two-Factor Authentication (2FA) — an extra step that stops hackers.
You discovered how to turn on 2FA on your accounts.
You learned about password managers that store your passwords safely.
You discovered how to stay safe on shared devices by logging out.
You studied common password mistakes and how to avoid them.
You learned how hackers guess passwords using common words, names, and social media.
You discovered what to do if your password is stolen.
Finally, you learned how to become a password champion.
MODULE 2 SUMMARY MAP
====================
[ Password ]
|
V
[ Strong Passwords ] -> [ No Reuse ]
|
V
[ 2FA ] -> [ Password Manager ]
|
V
[ Shared Device Safety ] -> [ Common Mistakes ]
|
V
[ What to Do If Stolen ] -> [ Password Champion! ]
Well done! You now understand password and account security. In Module 3, you will learn how to spot scams and stay safe online.
A password is a secret word that keeps your account safe.
Long length, mixed letters and numbers, and uniqueness. It must not use your name or birthday.
If one account is hacked, all accounts with the same password become exposed.
Two-Factor Authentication. It adds a second step to login, like a code.
Go to Settings, find Security, and turn on Two-Factor Authentication.
An app that stores all your passwords safely. You only remember one master password.
No. Use a password manager instead. Paper can be lost or seen.
Change it immediately, turn on 2FA, and check for strange activity.
No. Not even with close friends or family. A password is only for you.
You will learn how to spot scams and stay safe online.
| Column A (Word) | Column B (Meaning) |
|---|---|
| 1. Password | A. An extra step to login |
| 2. 2FA | B. A secret word that keeps your account safe |
| 3. Password manager | C. Using the same password everywhere |
| 4. Password reuse | D. An app that stores passwords safely |
| 5. Shared device | E. A device used by more than one person |
Answers: 1-B, 2-A, 3-D, 4-C, 5-E
| Column A (Action) | Column B (Purpose) |
|---|---|
| 1. Use a strong password | A. Stop hackers even if password is stolen |
| 2. Turn on 2FA | B. Keep account safe from guesses |
| 3. Log out | C. Store passwords safely |
| 4. Use a password manager | D. Prevent others from seeing your account |
Answers: 1-B, 2-A, 3-D, 4-C
Matching helps you connect words to meanings quickly.
A girl uses the same password for her email, school portal, and game account. One day, her email is hacked.
Questions:
A boy uses "1234" as the PIN for his phone. He loses the phone at school.
Questions:
A student turns on 2FA but does not save the backup codes. She loses her phone.
Questions:
These scenarios help you apply what you have learned to real situations.
Group size: 3–5 students
Time: 40 minutes
Materials: Paper, pencil
Instructions:
Goal: To practise creating password rules.
Time: 20 minutes
Materials: Notebook, pencil
Instructions:
Goal: To practise good password habits.
Time: 1–2 hours
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To teach your family about password safety.
Time: 1 week
Materials: Notebook, pencil
Instructions:
Goal: To see how real people handle password security.
You have finished Module 2. Well done! Here is how to prepare for Module 3, which is all about Spotting Scams and Staying Safe Online.
TRANSITION TO MODULE 3
======================
[ Module 2: Passwords and Account Security ]
|
V
[ Module 3: Spotting Scams and Staying Safe Online ]
|
V
[ You will learn: phishing, fake websites, safe browsing,
social media safety, and what to do if you fall for a scam ]
See you in Module 3. Keep thinking like a password champion!
End of Module 2 — Passwords and Account Security
⬅ Back to Course Outline | Go to Module 3 ➡
Security Awareness Fundamentals · Beginner Level · 2026
Security Awareness Fundamentals · Beginner Level · 2026
Welcome to Module 3 — the final module of Security Awareness Fundamentals. You have come a long way. In Module 1, you learned what security awareness is. In Module 2, you learned how to protect your accounts with strong passwords and 2FA.
Now we come to the last piece of the puzzle. You will learn how to spot scams and stay safe online. Scams come in many shapes and sizes. They arrive by SMS, email, phone call, and social media. Some are simple. Some are very clever. But all of them have warning signs.
In this module, you will learn how to spot a fake message. You will learn how to recognise a fake website. You will learn safe browsing habits. You will also learn how to stay safe on social media. And you will learn what to do if you fall for a scam.
Think of a security guard at a market. They watch for thieves, pickpockets, and troublemakers. They know the signs. You will learn the same skill for the digital world.
This module is written for complete beginners. You do not need to know any coding. Every new word is explained in very simple language. Every idea comes with examples from real life, school, home, and Nigeria. So relax, read slowly, and let us begin.
YOUR LEARNING JOURNEY IN MODULE 3
=================================
[ Start ]
|
V
What is Phishing?
|
V
Spotting Fake Emails and SMS
|
V
Fake Websites and Unsafe Downloads
|
V
Safe Browsing Habits
|
V
Social Media Safety
|
V
What to Do If You Fall for a Scam
|
V
[ You know how to stay safe online! ]
This module teaches you how to spot scams and stay safe online. You will learn about phishing, fake websites, safe browsing, social media safety, and what to do if you fall for a scam.
By the end of this module, you will be able to:
You will learn how to spot phishing, fake websites, and scams, and how to respond safely if something goes wrong.
Chidi is a 13-year-old boy who lives in Port Harcourt. His father works hard at a small business. Every month, his father saves a little money in the bank.
One Friday evening, Chidi's father received a text message.
"Dear customer, your account will be blocked in 24 hours. Click here to verify: www.gtbank-secure.net."
Chidi's father was worried. "Chidi, look at this. My bank account will be blocked!"
Chidi looked at the message carefully. He remembered what he had learned at school about phishing.
"Papa," he said, "look at the link. It says gtbank-secure.net. Real GTBank uses gtbank.com. This link is fake."
His father looked again. "But it looks real!"
"Scammers make it look real," Chidi said. "They also make you panic with the 24-hour warning. Real banks do not do that."
His father was not sure. So he called the bank directly. The bank manager said, "That message is not from us. Do not click it."
Chidi's father was relieved. "Chidi, you saved our savings!" he said. "Where did you learn this?"
"At school," Chidi said. "We learned about phishing and fake links."
From that day, Chidi's father always asked Chidi to check messages before clicking. The whole family became safer.
CHIDI'S STORY
=============
[ Fake bank SMS arrives ]
|
V
[ Father panics ]
|
V
[ Chidi checks the link ]
|
V
[ Link is fake: gtbank-secure.net ]
|
V
[ Father calls bank: message is fake ]
|
V
[ Family savings protected! ]
Chidi's father almost fell for a fake bank SMS. Chidi spotted the fake link and warned him. This story shows why scam awareness matters for everyone.
In this section, you will go through 12 short lessons. Each lesson teaches one big idea. Each lesson ends with a mini summary. Read slowly. Think about the examples. Ask questions. That is how you learn.
Phishing is when a bad person sends a fake message that pretends to be real. They want you to click a link or share your password.
Phishing is the most common way cyber criminals attack people. Knowing how to spot it protects you.
Think of a fisherman. They throw bait to catch fish. Phishing is the same. The bad person throws fake messages to catch you.
You receive an email from "your bank" asking you to click a link to verify your account. The email is fake.
A student receives an email saying, "Click here to see your exam results." The email is fake.
Your family receives an SMS saying, "Your DSTV subscription has expired. Click here to renew." The link is fake.
Many Nigerians receive fake SMS messages from "their bank" asking them to update their details. These are phishing messages.
PHISHING ======== [ Fake message ] -> [ You click ] -> [ Password stolen ] Like a fisherman: [ Fake bait ] -> [ Fish caught ]
Phishing is a fake message pretending to be real. It tries to steal your password or money.
A fake email is an email that pretends to come from a real company, like your bank, but is actually from a scammer.
Fake emails are very common. Learning to spot them stops most attacks.
Think of a person wearing a fake police uniform. They look real but are not. Fake emails are the same.
An email says, "Your Amazon account is locked. Click here to unlock." The sender is "amazon-security@mail-fake.com". It is phishing.
An email says, "Your exam results are ready. Click here." The sender is "exams@school-fake.com". It is fake.
An email says, "Your DSTV has expired. Click here." The sender is "dstv@mail-fake.com". It is fake.
Many Nigerians receive fake bank emails. They look real but the sender is a scammer.
SPOTTING A FAKE EMAIL ===================== [ Sender? ] -> Strange [ Greeting? ] -> General [ Urgency? ] -> Very high [ Link? ] -> Strange [ Spelling? ] -> Bad => Fake email. Do not click.
Fake emails pretend to be from real companies. Check the sender, the greeting, and the links before clicking.
A fake SMS is a text message that pretends to be from a company, like your bank, but is actually a scam.
Fake SMS messages are very common in Nigeria. They trick people into giving their bank details.
Think of a stranger pretending to be your friend. Fake SMS messages are the same.
A message says, "Your bank account is blocked. Click here: www.gtbank-secure.net." The link is fake.
A message says, "Your exam result is out. Click here to check." The link is fake.
A message says, "You have won ₦50,000. Send your bank details." It is a scam.
Nigerians receive fake SMS messages every day. Many people fall for them.
SPOTTING A FAKE SMS =================== [ Sender? ] -> Strange number [ Urgency? ] -> Very high [ Link? ] -> Strange [ Asks for ] -> BVN, PIN, or OTP => Fake SMS. Do not click or reply.
Fake SMS messages pretend to be from real companies. Check the sender, urgency, and links before clicking.
A fake website is a copy of a real website. It looks the same, but it is made by scammers to steal your login details.
If you enter your details on a fake website, the scammer gets your password and PIN.
Think of a fake shop that looks like the real one. When you pay, the money goes to the thief. Fake websites are the same.
A fake website looks like your bank's login page. You enter your account number and PIN. The scammer steals them.
A fake school portal asks for your exam number and password. It is not the real school.
A fake shopping website sells phones at half price. When you pay, the phone never arrives.
Many Nigerians have lost money on fake shopping websites. They looked real but were fake.
FAKE WEBSITE ============ [ Real site: gtbank.com ] [ Fake site: gtbank-secure.net ] The fake site looks the same. But it steals your login.
Fake websites copy real websites. They try to steal your login details. Check the web address before entering anything.
An unsafe download is a file or app you download from an untrusted source. It may contain malware.
Downloading unsafe files can infect your device and steal your data.
Think of picking up food from the ground and eating it. It may look fine, but it is not safe. Unsafe downloads are the same.
A student downloads a "free" version of a paid game from a strange site. The phone gets infected.
A student opens a USB drive found in the school compound. It contains malware.
Your family downloads a fake "loan app". It steals contacts and threatens users.
Some fake Nigerian loan apps on Play Store and other sites are actually malware.
UNSAFE DOWNLOADS ================ [ Strange website ] -> [ Download ] -> [ Device infected ]
Unsafe downloads can carry malware. Only download from trusted sources.
Safe browsing habits are simple actions you take while using the internet to stay safe.
You visit many websites every day. Safe habits protect you from danger.
Think of walking through a market. You keep your bag close and watch your step. Safe browsing is the same for the internet.
Before entering your bank details, you check for "https://" and the padlock.
A student uses only the official school portal for results.
Your family uses trusted shopping websites, not strange ones.
Nigerians should use only official bank apps and websites, not links from SMS.
SAFE BROWSING ============= [ Trusted site? ] -> Yes [ https://? ] -> Yes [ Padlock icon? ] -> Yes [ Strange ads? ] -> Ignore [ Downloads? ] -> Trusted only => Safe browsing.
Safe browsing habits protect you online. Check the web address, look for "https://", and avoid strange downloads.
Social media safety means being careful about what you share and who you talk to on social media.
Scammers use social media to learn about you. Then they use that information to trick you.
Think of a stranger who watches your house every day. They learn your routine. On social media, scammers learn the same.
A scammer sees your birthday post. They use it to guess your PIN.
A student posts the school name and class online. A scammer uses it to guess a password.
Your family posts holiday photos while away. Thieves know the house is empty.
Some Nigerian "romance scammers" use Facebook and Instagram to trick people.
SOCIAL MEDIA SAFETY =================== [ Don't post: ] - Address - Phone number - Date of birth - Holiday photos while away [ Do use: ] - Strong passwords - 2FA - Privacy settings
Social media safety means being careful about what you share. Scammers use your posts to trick you.
A scam is a trick to get your money or information. Scammers use common tricks that you can learn to spot.
Knowing the signs helps you spot a scam before it is too late.
Think of a fisherman's bait. It looks tasty, but there is a hook inside. Scams look good, but there is danger inside.
A message says, "You won a car. Pay ₦5,000 for delivery." Real prizes do not require payment.
A message says, "Pay ₦10,000 to upgrade your exam score." It is a scam.
A caller says, "Send money now or your brother will be arrested." It is a scam.
"419" scams promise huge money if you send a small fee. It is always a scam.
SIGNS OF A SCAM =============== [ Too good? ] -> Scam [ Urgent? ] -> Scam [ Asks for PIN? ] -> Scam [ Pay upfront? ] -> Scam [ Emotional? ] -> Scam
Scams have common signs: too good to be true, urgency, asking for PIN, and emotional pressure.
Scammers use emotions — fear, excitement, and love — to make you act without thinking.
When you are emotional, you are easier to trick. Knowing this helps you slow down.
Think of a magician. They distract you so you do not see the trick. Scammers do the same with emotions.
A scammer pretends to be your bank. They use fear to make you give your OTP.
A scammer says, "Your exam score will be cancelled. Pay to fix it." They use fear.
A scammer calls, saying, "Your brother is in trouble. Send money." They use fear.
Romance scammers use love to steal money from Nigerians and foreigners.
EMOTIONAL TRICKS ================ [ Fear ] -> "Your account is blocked!" [ Excitement ]-> "You won ₦1,000,000!" [ Love ] -> "I love you." [ Urgency ] -> "Act now!" [ Authority ] -> "I am from your bank." => Slow down. Think. Do not act immediately.
Scammers use emotions — fear, excitement, love, urgency — to trick you. Slow down and think before acting.
If you fall for a scam, it means you gave your money or information to a scammer. Do not panic. Act fast.
Fast action reduces the damage. You can stop the scammer before they cause more harm.
Think of a small fire in your kitchen. If you act fast, you can put it out. A scam is the same.
A man sends money to a scammer. He calls his bank immediately. The bank freezes the transfer.
A student gives their portal password to a scammer. They change it and inform the school.
Your family gives bank details to a fake caller. They call the bank and change PINs.
If a scammer takes money from your bank account, report to your bank and to the EFCC.
IF YOU FALL FOR A SCAM
======================
[ Do not panic ]
|
V
[ Change passwords ]
|
V
[ Turn on 2FA ]
|
V
[ Call your bank ]
|
V
[ Report the scam ]
|
V
[ Warn your family ]
If you fall for a scam, act fast: change passwords, turn on 2FA, call your bank, and report the scam.
Reporting a scam means telling the right people so they can help you and stop the scammer.
Reporting helps you recover money and protects others from the same scam.
Think of a thief in the market. If you shout, others are warned. Reporting a scam works the same way.
A scam victim reports to EFCC. The scammer is caught.
A student reports a fake exam score scam to their teacher.
A family reports a fake bank SMS to the bank and the police.
The EFCC and Nigeria Police have cybercrime units that help victims of scams.
REPORTING SCAMS IN NIGERIA ========================== [ Bank ] -> Customer care [ EFCC ] -> Economic crimes [ NITDA ] -> Cyber incidents [ NCC ] -> Telecom issues [ Police ] -> Cybercrime unit
Report scams to your bank, EFCC, NITDA, NCC, or the police. Reporting helps you and others.
A scam spotter is someone who can recognise a scam quickly and warn others.
When you spot scams, you protect yourself and your family. You become a hero.
Think of a lifeguard at a beach. They spot danger before it happens. A scam spotter does the same online.
A student spots a fake bank SMS and warns the whole family.
A student warns classmates about a fake exam-result email.
A family member warns everyone about a fake prize message.
Nigerian students warn their parents and neighbours about fake bank SMS messages.
SCAM SPOTTER
============
[ Learn signs ]
|
V
[ Slow down ]
|
V
[ Check carefully ]
|
V
[ Ask if unsure ]
|
V
[ Teach others ]
[ You protect your whole family! ]
A scam spotter recognises scams quickly and warns others. Anyone can become one.
| Word | Simple Definition |
|---|---|
| Phishing | A fake message pretending to be real. |
| Fake email | An email pretending to be from a real company. |
| Fake SMS | A text message pretending to be from a real company. |
| Fake website | A copy of a real website made to steal your login. |
| Unsafe download | A file or app from an untrusted source. |
| Safe browsing | Being careful while using the internet. |
| Social media safety | Being careful about what you share online. |
| Scam | A trick to get your money or information. |
| Emotional trick | Using fear, excitement, or love to trick you. |
| Urgency | Rushing you to act without thinking. |
| Report | Telling the right people about a scam. |
| EFCC | Economic and Financial Crimes Commission. |
| NITDA | National Information Technology Development Agency. |
| NCC | Nigerian Communications Commission. |
| Scam spotter | Someone who recognises scams and warns others. |
These words are the foundation of scam awareness. Use them often so they become easy.
By SMS, email, phone call, or social media. Learn to spot them all.
Check the sender, the link, and the message. Small checks stop big problems.
Fear, excitement, and love are tools. Slow down before you act.
Change passwords, call your bank, and report the scam.
Learn the signs, stay calm, and teach others.
These five concepts are the heart of Module 3. Read them again before finishing the course.
CHECKING AN EMAIL ================= [ Sender? ] -> Real? [ Greeting? ] -> General? [ Urgency? ] -> High? [ Spelling? ] -> Bad? [ Link? ] -> Real? If any is bad, do not click.
CHECKING A WEBSITE ================== [ Address? ] -> Real? [ https://? ] -> Yes? [ Padlock? ] -> Yes? [ Spelling? ] -> Correct? If any is bad, do not enter details.
IF YOU FALL FOR A SCAM
======================
[ Do not panic ]
|
V
[ Change passwords ]
|
V
[ Turn on 2FA ]
|
V
[ Call your bank ]
|
V
[ Report ]
|
V
[ Warn family ]
Checking emails, checking websites, and responding to scams all follow simple steps. Follow them, and you are safer.
A student spots a fake exam-result email and does not click. They avoid a scam.
A parent receives a fake bank SMS and calls the bank directly. They avoid losing money.
A trader receives a fake prize SMS and deletes it. They stay safe.
A grandparent receives a fake bank call and hangs up. They stay safe.
A family uses strong passwords, 2FA, and safe browsing habits. They stay safe.
Scam awareness protects students, parents, traders, grandparents, and families.
Many Nigerians receive fake SMS from "their bank". These are phishing messages.
Some loan apps in Nigeria are malware. They steal contacts and threaten users.
Many Nigerians receive fake job offers on WhatsApp. They ask for money upfront.
"Yahoo boys" sometimes pretend to be in love to steal money from victims.
Many Nigerians receive messages saying they have won prizes. They are scams.
Nigeria has many examples of scams. Learning to spot them is essential.
You would not take candy from a stranger. Do not click strange links either.
If someone offers you a free bike for a small fee, it is a scam. Same online.
A stranger pretends to be your friend to trick you. Scammers do the same online.
You lock your door at night. Lock your accounts with strong passwords too.
A careful driver watches the road. Be careful online too.
Scam awareness is like everyday safety. Candy from strangers, free bikes, fake friends, locked doors, and careful driving all teach the same lesson.
| Situation | Safe Action |
|---|---|
| Receiving strange SMS | Do not click |
| Getting a "won prize" email | Delete it |
| Strange phone call | Hang up and call the real number |
| Strange website | Close the tab |
| Strange app | Do not install |
Every day brings chances to spot scams. Now you know how to respond.
Parents can teach scam awareness at home through daily conversations and simple examples.
Scam awareness is powerful. Simple knowledge stops most attacks.
Scam awareness is full of surprises. The more you learn, the safer you become.
These ten points are the heart of Module 3. Read them again before finishing the course.
Avoiding these mistakes will keep you safer online than most people.
These ten habits will protect you from most scams.
PHISHING ======== [ Fake message ] -> [ You click ] -> [ Password stolen ] Like a fisherman: [ Fake bait ] -> [ Fish caught ]
SPOTTING A FAKE EMAIL ===================== [ Sender? ] -> Strange [ Greeting? ] -> General [ Urgency? ] -> Very high [ Link? ] -> Strange [ Spelling? ] -> Bad => Fake email. Do not click.
FAKE WEBSITE ============ [ Real site: gtbank.com ] [ Fake site: gtbank-secure.net ] The fake site looks the same. But it steals your login.
SAFE BROWSING ============= [ Trusted site? ] -> Yes [ https://? ] -> Yes [ Padlock icon? ] -> Yes [ Strange ads? ] -> Ignore [ Downloads? ] -> Trusted only
EMOTIONAL TRICKS ================ [ Fear ] -> "Your account is blocked!" [ Excitement ]-> "You won ₦1,000,000!" [ Love ] -> "I love you." [ Urgency ] -> "Act now!" [ Authority ] -> "I am from your bank." => Slow down. Think.
IF YOU FALL FOR A SCAM
======================
[ Do not panic ]
|
V
[ Change passwords ]
|
V
[ Turn on 2FA ]
|
V
[ Call your bank ]
|
V
[ Report ]
|
V
[ Warn family ]
These diagrams help you see scam awareness clearly. Draw them yourself to remember them better.
| Real Message | Fake Message |
|---|---|
| Official sender | Strange sender |
| No urgency | "Act now!" |
| No spelling mistakes | Spelling mistakes |
| Never asks for PIN or OTP | Asks for PIN or OTP |
| Safe Browsing | Unsafe Browsing |
|---|---|
| Trusted websites only | Clicking strange links |
| https:// and padlock | Broken padlock |
| Trusted downloads | Free downloads from strange sites |
| Log out after use | Leave accounts open |
| Real Prize | Scam Prize |
|---|---|
| You entered a competition | You did not enter anything |
| No payment needed | You must pay a fee |
| Official contact | Strange sender |
| Clear process | "Click this link now!" |
Comparing ideas side by side helps you remember the differences clearly.
| Lesson | Main Idea |
|---|---|
| Lesson 1 | Phishing is a fake message pretending to be real. |
| Lesson 2 | Spot fake emails by checking sender and links. |
| Lesson 3 | Spot fake SMS messages the same way. |
| Lesson 4 | Fake websites copy real ones to steal logins. |
| Lesson 5 | Unsafe downloads can carry malware. |
| Lesson 6 | Safe browsing protects you online. |
| Lesson 7 | Social media safety means being careful what you share. |
| Lesson 8 | Scams have common signs. |
| Lesson 9 | Scammers use emotions to trick you. |
| Lesson 10 | Act fast if you fall for a scam. |
| Lesson 11 | Report scams to your bank and EFCC. |
| Lesson 12 | Anyone can become a scam spotter. |
Congratulations! You have completed Module 3. Let us review what you have learned.
You began by learning what phishing is — a fake message that pretends to be real.
You learned how to spot fake emails by checking the sender, greeting, urgency, and links.
You discovered how to spot fake SMS messages.
You explored fake websites that copy real ones to steal your login.
You learned about unsafe downloads that can infect your device.
You studied safe browsing habits — checking web addresses, looking for "https://", and avoiding strange downloads.
You discovered social media safety — being careful what you share.
You learned the signs of a scam.
You explored the emotional tricks scammers use — fear, excitement, and love.
You learned what to do if you fall for a scam.
You discovered how to report scams in Nigeria.
Finally, you learned how to become a scam spotter.
MODULE 3 SUMMARY MAP
====================
[ Phishing ]
|
V
[ Fake Emails ] -> [ Fake SMS ] -> [ Fake Websites ]
|
V
[ Unsafe Downloads ] -> [ Safe Browsing ] -> [ Social Media Safety ]
|
V
[ Signs of a Scam ] -> [ Emotional Tricks ]
|
V
[ What to Do If You Fall ] -> [ Reporting ] -> [ Scam Spotter! ]
Well done! You have completed the entire Security Awareness Fundamentals course. You now have strong skills to stay safe online and teach others.
Phishing is a fake message that pretends to be real. It tries to steal your password or money.
Check the sender, greeting, urgency, links, and spelling. If any of them look strange, do not click.
Check the web address, look for "https://" and the padlock, and check for spelling mistakes.
A file or app from an untrusted source. It may contain malware.
Visiting trusted sites, checking links, using "https://", and avoiding strange downloads.
Do not share your address, phone number, or birthday publicly. Use strong passwords and privacy settings.
Too good to be true, urgency, asking for PIN or OTP, and emotional pressure.
Do not panic. Change passwords, turn on 2FA, call your bank, and report the scam.
Your bank, EFCC, NITDA, NCC, or the Nigeria Police cybercrime unit.
How to spot phishing, fake websites, and scams, and how to respond if something goes wrong.
| Column A (Word) | Column B (Meaning) |
|---|---|
| 1. Phishing | A. A copy of a real website |
| 2. Fake website | B. A trick to get your money |
| 3. Scam | C. A fake message pretending to be real |
| 4. Urgency | D. Telling the right people about a scam |
| 5. Report | E. Rushing you to act without thinking |
Answers: 1-C, 2-A, 3-B, 4-E, 5-D
| Column A (Action) | Column B (Purpose) |
|---|---|
| 1. Checking the sender | A. Avoid malware |
| 2. Looking for "https://" | B. Spot fake emails |
| 3. Trusted downloads only | C. Spot fake websites |
| 4. Reporting scams | D. Protect yourself and others |
Answers: 1-B, 2-C, 3-A, 4-D
Matching helps you connect words to meanings quickly.
A student receives an SMS: "Your bank account is blocked. Click here: www.gtbank-secure.net."
Questions:
A woman receives a message: "You have won a car. Pay ₦5,000 for delivery."
Questions:
A man downloads a "loan app" from a strange website. It asks for his contacts and photos.
Questions:
These scenarios help you apply what you have learned to real situations.
Group size: 3–5 students
Time: 40 minutes
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To practise teaching scam awareness in a fun way.
Time: 20 minutes
Materials: Notebook, pencil
Instructions:
Goal: To create your own scam safety plan.
Time: 1–2 hours
Materials: Paper, pencil, colour pencils
Instructions:
Goal: To teach others what you have learned.
Time: 1 week
Materials: Notebook, pencil
Instructions:
Goal: To see how real people handle scam awareness.
You have completed the entire Security Awareness Fundamentals course. Well done! Here is what to do next.
YOUR COURSE JOURNEY
===================
[ Module 1: Security Awareness Basics ]
|
V
[ Module 2: Passwords and Account Security ]
|
V
[ Module 3: Spotting Scams and Staying Safe Online ]
|
V
[ You are now a security awareness champion! ] 🎉
Congratulations on completing the course. Keep thinking like a security awareness champion, keep learning, and keep your family safe.
End of Module 3 — Spotting Scams and Staying Safe Online
End of the Security Awareness Fundamentals Course
⬅ Back to Course Outline | ⬅ Back to Module 2
Security Awareness Fundamentals · Beginner Level · 2026