Phishing Lessons for Students in Grades 6–9

Computer Science · Phishing lesson

Phishing Lessons for Students in Grades 6–9

If you need a phishing lesson for students in grades 6–9 that is ready to teach this week, this unit gives you the full set: a reading text, worksheets on four levels, a hands-on deep-dive task, slides and answer keys with a marking guide. Students learn to spot a fake message before they click, and you skip the evening of building it yourself.

See the phishing unit →
Grades 6–9Written for middle school readers
Four worksheet levelsBasic, Standard, Plus and Project
Instant downloadLink by email and in your account
Quick answer

Cybersecurity: Phishing & Social Engineering is a $24.99 computer science unit for grades 6–9. It includes a detailed reading text, differentiated worksheets on four levels (Basic, Standard, Plus, Project), a hands-on deep-dive task, slides for the whole unit and full answer keys with a marking guide. It is a digital download, available right after purchase. The 10-unit Computer Science Activities Bundle ($119.99) covers phishing alongside nine other topics.

The resources

Cybersecurity: Phishing & Social Engineering, Grades 6–9

Start with the first resource; the others are optional add-ons. Open any cover for the full contents and price.

The real problem

Why a phishing lesson is harder to teach than it looks

Most students already know the word phishing. Ask them what it looks like, though, and you get vague answers about strange emails from princes. The messages they will actually meet are short, plausible and personal: a text saying a package could not be delivered, a fake login page for a school account, a direct message from a friend whose account was taken over. A good lesson has to move students from the cartoon version to the real one. The hard part is building material that does this at more than one reading level. In one class you may have students who read every word of a message closely and students who skim the first line and tap the link. A single worksheet either bores the first group or loses the second. You also need examples that feel current without pulling real scam messages from your own inbox, plus a way to check whether students can apply the warning signs on their own instead of just repeating a list. Doing all of that from scratch for one topic takes more planning time than most computer science or technology teachers have spare in a given week.

Why it fits

How the unit handles a phishing lesson

Each part of the unit has a clear job in the lesson, so you can see where it fits before you print anything.

  • The detailed reading text gives every student the same base vocabulary before any worksheet starts.
  • Basic-level worksheets let students who struggle with reading still work on recognizing warning signs.
  • Standard and Plus levels ask more of confident readers without you writing a second version.
  • The Project level gives fast finishers a longer task so the room stays on topic.
  • Ready-to-teach slides cover the whole unit, so you present from them instead of building a deck.
  • Full answer keys and a marking guide make checking work quick and consistent across classes.

Getting started

Your first week with the phishing unit

This is one way to run it. Adjust the pace to your schedule and how much class time you have for the topic.

  1. Read through the slides and reading textBefore class, go through the slides and the reading text once. Note which terms your students may already know and which ones need a minute of explanation on the board.
  2. Open with a message students might getStart the lesson by asking students to describe a suspicious text or message they have seen. Then use the slides to name the patterns behind their examples.
  3. Assign worksheet levelsHand out Basic, Standard or Plus worksheets based on what you know about your readers. Keep the Project level ready for students who finish early or want more.
  4. Run the deep-dive taskUse the hands-on deep-dive task as the centerpiece of a later lesson. Students apply what they learned rather than recall it, which tells you more about their understanding.
  5. Mark with the guide and close the loopUse the answer keys and marking guide to check work. Share a few common mistakes with the class so everyone sees which warning signs were easiest to miss.

What to buy

One unit or the full computer science set

If phishing is the only gap in your plans, the single unit at $24.99 is the right buy. If you teach a computer science or technology course and need more than a handful of topics, look at the Computer Science Activities Bundle at $119.99: 10 units and 30 lessons, written for grades 7–10, covering phishing-adjacent topics like data privacy and cryptography as well as Python and AI. Five single units already cost more than the bundle. For a shorter set focused on online safety and AI, the AI Literacy & Cybersecurity Activities sell for $69.99.

See the full contents on the product page →

Honest limits

What this unit does not do

This is one unit on one topic, not a full course. It does not include software, accounts or devices; if you want students to look at examples on screen, you use what your school already has. Check the content against your own course requirements and school policies before you teach it. The licence covers use in your own teaching; if colleagues want to use it too, send Teach Lessons a short message first. If it turns out not to fit, you can exchange it within 7 days for store credit of equal value. This is store credit, not a cash refund.

Good to know

Frequently asked questions

Is this unit aligned to state or national computer science standards?

The unit is written for grades 6–9 and covers phishing and social engineering, but it makes no claim of alignment with any state, national or professional standard, and no organization has endorsed it. Compare the content against the standards your school or district uses before you plan with it. That check is quick with the slides and reading text in front of you.

Do students need computers for this lesson?

The unit needs no devices at all. The reading text, worksheets and deep-dive task are designed to be printed or used digitally, so a class with no laptops can still do the whole thing on paper. If your room has a projector, the slides are ready to show.

How many class periods does it take?

The product does not set a fixed number of periods. As a suggestion, a short version with the reading, one worksheet and a discussion fits in one or two periods, and adding the deep-dive task and Project level stretches it across a week. You choose the depth.

Will it work for students who read below grade level?

That is the main reason the worksheets come on four levels. The Basic level keeps the reading demand lower while still asking students to identify warning signs, so weaker readers practice the same skill as everyone else instead of sitting out. It also means you can give the same lesson to the whole room without singling anyone out.

Does it use real scam messages?

The product description does not list specific example messages, so look at the preview on the product page if that matters to you. Either way, it saves you from collecting examples out of your own inbox, which is often what teachers end up doing. If you add your own examples, remove names and personal details first.

Can I use it as an advisory or digital safety lesson instead of a CS class?

Yes, the material is about recognizing scams and protecting yourself, not about code. An advisory or homeroom teacher can run the reading text and Basic or Standard worksheets without any computer science background, using the answer keys to check responses. It also fits well before students set up new school accounts.

Get the phishing unit ready for this week

Open the product page to see what is inside, then download it right after checkout and teach from the slides.

See the phishing unit →