Privacy, Devices & Citizenship · lesson 16 of 17 · 15 min
Checking before clicking
One of the most important habits in cybersecurity is simple: pause before you click. Many cyberattacks succeed not because of sophisticated technology, but because people click without thinking. A moment of careful thought can prevent a major problem.
Before clicking any link, button, or attachment, take a moment to ask yourself: Do I know where this goes? Did I expect this? Does something feel off? If the answer to any of these is “no” or “I am not sure,” stop and check with a trusted adult before proceeding.
Hover before you click: On a computer, you can hover your mouse over a link to see the real web address it leads to — shown at the bottom of the browser. If the address looks strange, has random letters and numbers, or does not match what you expected, do not click it.
The click checklist
Ask yourself these questions before every click:
Do I know who sent this?
- A friend or trusted source you recognize
- An unknown sender or someone you have never heard of
Was I expecting this?
- You asked for this link or file
- It arrived unexpectedly — you did not ask for it
Does the link address look normal?
- A familiar, recognizable web address
- Random letters, numbers, or a slightly misspelled address
Is there pressure to click quickly?
- No urgency — you can take your time
- “Act NOW!” or “Click immediately or lose your account!”
Would a trusted adult approve?
- Yes — they would be fine with you clicking this
- You would feel uncomfortable showing them
Why urgency is a red flag
Attackers use urgency as a manipulation tool. Messages that say “Act NOW!”, “Your account will be deleted in 24 hours!”, or “Click immediately!” are designed to make you panic and act without thinking.
Legitimate organizations — banks, schools, websites — do not threaten you or create extreme urgency in messages. When you feel pressured to act immediately, that is a signal to slow down, not speed up. Take a breath, step back, and check with a trusted adult.
Key words to remember
- Pause before you click
- Hover
- Urgency
- Unexpected message
- Suspicious link
Match each click-safety concept to its description
Checking before clicking — quiz
What should you do before clicking a link in a message?
- Click it immediately to see where it goes
- Pause and check if you know who sent it and whether it looks safe
- Forward it to all your friends first
- Click it only if the message has a picture
Answer: Pause and check if you know who sent it and whether it looks safe
Always pause and check before clicking — this simple habit prevents most phishing attacks.
You hover over a link and the address at the bottom of your browser looks very strange. What should you do?
- Click it anyway — it is probably fine
- Do not click it and tell a trusted adult
- Copy the address and search for it
- Click it quickly before it disappears
Answer: Do not click it and tell a trusted adult
A strange-looking link address is a red flag. Do not click and get help from a trusted adult.
If a message creates urgency (“Click NOW or lose your account!”), you should act immediately.
- True
- False
Answer: False
Urgency is a manipulation tactic. Pause, think, and check with a trusted adult before acting.
What does hovering over a link show you?
- The file size of the link
- The real web address the link leads to
- Who sent the link
- How many people clicked it
Answer: The real web address the link leads to
Hovering shows the actual destination URL at the bottom of the browser — useful for spotting fake links.
Which of these is a safe signal before clicking a link?
- The message arrived unexpectedly
- You asked for this link and recognize the sender
- The message says “Act NOW!”
- The link address has random letters and numbers
Answer: You asked for this link and recognize the sender
Expected links from recognized senders are much safer than unexpected ones from unknown sources.
Legitimate organizations like banks and schools often use extreme urgency in their messages.
- True
- False
Answer: False
Legitimate organizations do not threaten you or create extreme urgency. Urgency in messages is a red flag.
What is a suspicious link?
- Any link on the internet
- A link with a strange address, random characters, or a misspelled domain
- A link from your teacher
- A link to a school website
Answer: A link with a strange address, random characters, or a misspelled domain
Suspicious links often have random characters or slightly misspelled domain names to trick you.
What should you do if you are not sure whether a link is safe?
- Click it quickly
- Ask a trusted adult before clicking
- Forward it to friends to check
- Delete your account
Answer: Ask a trusted adult before clicking
When in doubt, always check with a trusted adult before clicking an unfamiliar link.
An unexpected attachment in a message from an unknown sender is probably safe to open.
- True
- False
Answer: False
Unexpected attachments from unknown senders are a major red flag — they often contain malware.
Why do attackers use urgency in their messages?
- To be helpful
- To make you panic and act without thinking
- To save you time
- To test your cybersecurity knowledge
Answer: To make you panic and act without thinking
Urgency is a manipulation tactic — it bypasses careful thinking and makes people act impulsively.
Previous lesson: Pop-ups and ads
Back to Privacy, Devices & Citizenship
Next lesson: Online games and chat