Alignment: LO1 / A1 Objective: Classify a suspicious contact using channel, claim, pressure, requested action and payment route.
Use only the simulated data supplied in this folder. Do not test live suspicious links, accounts, phone numbers or payment routes.
- Open the supplied message pack and assign each item an evidence ID.
- Record the claimed sender, channel, callback details, URL and requested action.
- Mark authority, urgency, scarcity, fear, reward and secrecy pressure cues.
- Identify the asset at risk: credentials, money, device access, identity or business data.
- Trace the proposed payment or access route and note reversibility.
- Score likelihood and impact from 1 to 5 using the worksheet rubric.
- Choose block, verify, monitor or escalate and state the evidence for the choice.
- Peer-review one classification and revise unsupported assumptions.
Completed signal matrix with risk score and decision rationale.
Every decision cites at least two observable indicators; no decision relies only on spelling or grammar.
Which observable fact most changed your decision, and which uncertainty remains?