Social Engineering Activities for the Middle School Classroom

Computer Science · Social engineering

Social Engineering Activities for the Middle School Classroom

Teachers looking for social engineering activities for the classroom can use this grades 6–9 unit to give students active work on how manipulators exploit trust, urgency and curiosity. Its hands-on deep-dive task, leveled worksheets and Project option keep students doing rather than listening, with a reading text, slides and a marking guide behind them.

Open the unit page →
Hands-on deep-dive taskStudents apply ideas, not just recall
Project-level optionLonger work for students who want more
Print or digitalDownloaded right after purchase
Quick answer

Cybersecurity: Phishing & Social Engineering ($24.99) is a grades 6–9 unit that teaches how people, not machines, get tricked into giving away information. Its activities include a hands-on deep-dive task and worksheets on Basic, Standard, Plus and Project levels, backed by a reading text, unit slides and answer keys with a marking guide. For a longer program with discussion and project-based learning, the Computer Science Activities Bundle costs $119.99.

The resources

Cybersecurity: Phishing & Social Engineering, Grades 6–9

Start with the first resource; the others are optional add-ons. Open any cover for the full contents and price.

The real problem

Teaching manipulation without a lecture

Social engineering is about psychology as much as technology. An attacker pretends to be a teacher, a tech support worker or a friend, creates a sense of urgency, and asks for something small. Students understand this quickly when they experience the pressure themselves; they forget it quickly when they only hear a list of tactics. That is why teachers search for activities instead of explanations. The difficulty is designing activities that teach the right lesson. A careless task can drift into students practicing how to trick each other, or turn into a scary-stories session that leaves them anxious rather than alert. The work has to keep students in the role of the person spotting the trick: noticing the false authority, the deadline, the request that does not quite make sense. It also has to scale. A thirty-student class needs enough structured material that early finishers have something meaningful to do and students who need support are not stuck on the first question. Without that structure, an activity-heavy lesson can lose the room in ten minutes.

Why it fits

Activities with a clear purpose

Each component gives students something to do while keeping the focus on recognizing and resisting manipulation.

  • The hands-on deep-dive task puts students in the position of analyzing an attempt, not running one.
  • Leveled worksheets keep every student working on the same tactics at a reading level that suits them.
  • The Project level gives a self-directed task for students who move faster than the group.
  • A shared reading text sets out the vocabulary so activities do not stall on unfamiliar terms.
  • Slides give you a structure for debriefing after each activity rather than improvising one.
  • The marking guide helps you assess reasoning in open-ended answers, not just right or wrong.

Getting started

Running the activities in class

A suggested sequence that keeps the lessons active. Change the order or the time spent to suit your group.

  1. Start with a quick pressure testAsk students how they would respond if someone claiming to be from the school asked for their password right now. Collect answers without judgment and use them as a starting point.
  2. Name the tactics with the reading textHave students read the reading text in pairs, then use the slides to pull out the tactics it describes. Write them on the board for the rest of the unit.
  3. Work through leveled worksheetsStudents complete the worksheet level that suits them. Circulate and ask them to point to the exact words in an example that should make them suspicious.
  4. Build the lesson around the deep-diveSet aside a whole period for the hands-on deep-dive task. Let students work in small groups and have each group explain its reasoning to the class at the end.
  5. Reflect on real-life responsesClose by asking students what they would actually do next time and who they would tell. Use the marking guide to review the written work afterward.

What to buy

Which purchase fits an activity-based approach

For one focused set of social engineering activities, the single unit at $24.99 is enough. If you want activities across many digital topics, the Computer Science Activities Bundle ($119.99, grades 7–10) adds discussion activities and project-based learning across 10 units, including AI literacy, data privacy and cryptography. If your focus is safety plus AI rather than full computer science, AI Literacy & Cybersecurity Activities ($69.99) uses case studies, discussions and inquiry tasks around phishing, personal information and AI-generated content.

See the full contents on the product page →

Honest limits

Honest limits

The unit is a classroom resource, not a simulation platform. There is no software, phishing test service or student account included, and none is required. Any screen-based examples come from devices your school already has. Look through the activities and check them against your own course requirements and school guidelines on online safety. The licence covers your own classes; ask Teach Lessons with a short message before colleagues use it. If it is not what you need, exchange it within 7 days for store credit of equal value; there is no cash refund.

Good to know

Frequently asked questions

Is the unit approved or aligned to any standards?

The unit is written for grades 6–9 and makes no alignment or approval claim for any state, national or professional framework. Nobody outside Teach Lessons has endorsed it. Review the activities against the requirements you teach to and decide how they fit your course before you schedule them.

Will students learn to manipulate each other?

The unit is about recognizing and resisting social engineering. Keep activities framed around the person being targeted, and set clear rules at the start that nobody tests tactics on classmates. The slides give you a natural point to state those rules. Remind them that the goal is protecting themselves and others.

Are the activities group work or individual?

The product description lists worksheets and a hands-on deep-dive task without fixing a grouping. Many teachers run worksheets individually and the deep-dive with small groups, but you can arrange either way. Group work tends to suit the deep-dive because students can test each other's reasoning out loud before writing anything down.

What do early finishers do?

Move them to the Project level. It is part of the four-level worksheet set and gives a longer, more open task so faster students stay busy with the same topic rather than starting something unrelated. You can also ask Project-level students to share their work at the end, which gives the rest of the class one more example to discuss.

Can it be taught in a library or advisory period?

Yes. Nothing in the unit depends on a computer lab or programming knowledge. A librarian or advisory teacher can run the reading text, worksheets and deep-dive task with the answer keys and marking guide as support. The topic also suits the start of a school year, when students are setting up accounts and receiving lots of new messages.

How do I assess an activity like this?

Use the marking guide that comes with the answer keys. It helps you judge whether students can explain why a request is suspicious, which matters more than whether they guessed the right answer. Ask students to write a short justification for each answer so the guide has something to assess. Short written reasons also show you who is guessing.

Bring social engineering to life in your room

Look at the full contents on the product page and start teaching with the download that arrives straight after checkout.

Open the unit page →