• Scam Resilience and Cyber Awareness Quiz

  • Disclaimer

    This Scam Resilience and Cyber Awareness Quiz, and all information provided by Identity Care Australia & New Zealand Ltd (IDCARE) is governed by Terms and Conditions detailed at https://www.idcare.org/about-idcare/policies-and-documents/terms-and-conditions

    Unless where otherwise specified or clearly recognisable, all content available on www.idcare.org is owned or provided by IDCARE or its licensors. IDCARE holds and reserves all intellectual property rights for any such content.

    Users are solely responsible for ensuring that they review and understand the terms and conditions and that their use of content provided by IDCARE does not breach these terms. 

    IDCARE’s Privacy Policy (https://www.idcare.org/about-idcare/policies-and-documents/privacy-policy) details the purpose, use, storage, sharing and destruction of personal information collected by idcare.org. 

    Questions can be directed to contact@IDCARE.org or PO Box 412, Caloundra, QLD, 4551.

     

  • Scam Resilience and Cyber Awareness Quiz

  • The purpose of this quiz is to measure your scam awareness and resilience. Based on your responses, we can provide you advice on how to improve your ability to spot and avoid a scam. 

    Your responses will also help IDCARE understand scams and risks impacting the community, which means we can target our services through identifying key gaps in knowledge or misconceptions about cybercrime and identity theft.

    The more honest you are with the questions the more we can help you improve your knowledge.

    Feedback will be given throughout the quiz as well as some useful resources at the end.

    This will help you to stay ahead of the latest threats!

  • Information About You

  • Gender*
  • Age*
  • Do you think you could spot a scam?*

  • Great! Let's see how you go.

  • Not to worry! This quiz will provide advice about what to look out for.

  • When signing up for online services do you read the Terms and Conditions or Privacy Policy?*

  • Excellent!

  • Good effort.

  • Sometimes there can be unexpected surprises hidden in these documents. We recommend you read them, in particular to understand how data is collected and used (and for how long).

  • Reading Terms and Conditions and Privacy Policies is always recommended as it allows you to know exactly what you are signing up for and how your information will be used and stored. It can also confirm if these clauses and obligations are current and accurate for the company.

  • When you are busy do you become so task focused that others have commented 'talking to you is like talking to a brick wall'?*
  • When you are busy and stressed have you missed or overlooked simple things that you would have normally noticed?*

  • This is called a high cognitive load. Scammers like to create a stressful scenario that requires immediate action to overwhelm you.

    When a person is already busy and stressed, this additional situation can cause them to apply less scrutiny, increasing the chances of becoming more vulnerable.

    When faced with this scenario, take a breath, ask someone else for their opinion, and don't act in haste. Pausing can be extremely powerful in preventing scams. 

    Any legitimate situation will allow you to walk away and think before making any decisions.

  • Do you keep informed on the latest scams and online threats.*

  • Perfect!

  • Good effort. If you want to know more about trending scams you can subscribe to IDCARE's newsletter (https://www.idcare.org/contact/newsletter-sign-up-form) and ScamWatch alerts (https://www.scamwatch.gov.au/about-us/news-and-alerts) 

  • It's good to stay informed. If you want to know more about trending scams you can subscribe to IDCARE's newsletter (https://www.idcare.org/contact/newsletter-sign-up-form) and ScamWatch alerts (https://www.scamwatch.gov.au/about-us/news-and-alerts)  

  • Keeping up to date with latest scams and cyber threats will help you to recognise a scam for what it is. The online world is ever changing as are the scams and threats. They are becoming more sophisticated and harder to spot.

    Talking about what you know and have learnt with your friends and family increases scam awareness and helps break down the stigma around scams.

  • Technology and You

  • How many devices in your house are connected to the internet?*
  • Of these devices, approximately what percent are Apple / iOS / Mac?*

  • A common misconception is that if you have Apple devices you can't get infected by malware. Although Apple software may have less vulnerabilities it is not immune to being infected.

    Regardless of what type of device you use, you should still implement the same protections and barriers. Ensure your anti-virus software is up to date and use a password manager to manage passwords across your devices and accounts.

    Scammers will often target a person to leverage them to gain access to systems rather than trying to hack software. 

  • What best describes your residential situation?*

  • Scammers often target individuals.

    When people live alone or are by themselves during a scam attempt, they may be more vulnerable because they lack an independent person to check with when something doesn't seem quite right.  

    Don't be afraid to disengage or pause if something feels suspicious. Check with a friend, family member or colleague. Verify any requests for personal information or credentials by contacting the organisation you believe you are dealing with via their publicly available contact details (don't use those provided in suspicious messages).

  • Does someone in your household ensure your devices are up-to-date with the latest security and anti-virus software?*

  • Great job!

  • We highly recommend using anti-virus, keeping it up-to-date, and having security patching set to automatic.

  • Keeping devices up-to-date and using anti-virus software is extremely important as it helps prevent viruses and other malware from infecting your device. Most software companies will alert you of software updates, however, ensure you use the official app or website to download and update software. 

    Make sure you have your device set up to apply official manufacturer security patches automatically (find out more at https://www.idcare.org/fact-sheets/understanding-patching). 

  • Who in your household takes most responsibility for the physical safety and security of the devices in your home (select all that apply):*

  • Protecting your physical devices is just as important as protecting your online identity, and they are often linked.

    Make sure your devices are password, PIN, or biometric protected.

    Never share your login details with another person.

    If you use a shared device, set up different users/personas for each approved user.

    Make sure you secure your devices in a locked space when not in your possession.

    Never provide remote access to your device unless you are 100% that the person who wants access is legitimate. 

    Only download software from legitimate sources and closely scrutinise reviews (are there enough of them? are they all too recent? do they appear suspicious).

    Most anti-virus programs will check apps for malicious content before they can infect your device.

  • Knowledge Base

  • How well do you know about and use the following?

  • Anti-virus software*

  • Anti-virus software is essential to help protect you from unwanted viruses and malware. It should be installed on all your devices. Ensure anti-virus software is downloaded from legitimate sources as many websites claiming to offer antivirus software could be scams or contain viruses.

  • Firewalls*

  • A firewalls is a barriers between your devices and the internet. They are often built into your modem and pre-configured to protect you. You shouldn't generally need to alter or turn off the firewalls. If someone is asking you to disable your firewall this is likely a scam and you should pause and rethink engagement. 

  • Multifactor Authentication (MFA)*

  • Multifactor Authentication (MFA) helps to secure your online accounts from unauthorised access by requiring more information that just a username and password (such as a one-time passcode sent via SMS or a code from a linked app). This means that even if a scammer has gotten access to your login details, they can't get access to you account without your phone or logging into your email. 

    Almost every service will offer some sort of MFA that you can enrol in. In most cases you can use the same authentication app for all of your accounts so it is easy to find when you need it. The most commonly used authentications apps are Apple MFA, Microsoft Authenticator, Google Authenticator, and Authy.

    For government services accounts, like myGov and linked services, we recommend using MyID (https://www.myid.gov.au/using-myid-mygov). 

  • Internet browsing protection*

  • Most anti-virus software includes internet browsing protections to help warn and protect you from scams and malware.

  • Data, Privacy and Security

  • Do you know if any of your personal details or data have been involved in a data breach?*
  • If you believe or know your data was exposed what categories are you aware of?*
  • At home, do you know where you keep documents like your birth certificate, tax returns, bank statement or passports?*
  • How do you normally dispose of old documents containing personal information (i.e. tax returns, bank statements, other files and documents)?*

  • Keeping your personal information and data secure is extremely important. Whether it be physical or digital, scammers will attempt to gain as much information about a target as they can. This could involve buying compromised inforamation about you leaked from data breaches, leveraging weak passwords for online accounts, stealing physical documents from your trash or an unlocked letterbox.

    It is best practice to secure all avenues of personal information - use strong, unique passwords and MFA for online accounts, securely destroy or dispose of document, and lock away your important information. 

    You can also check if your email address has been included in any known data breaches by searching it at https://haveibeenpwned.com/. This is a free service unaffiliated with IDCARE.  

  • Do you have a lock on your letterbox?*

  • Social Media Habits

  • Do you have social media accounts?*
  • What platform/s do you use?*
  • Which platform do you use most often?*
  • How many hours per week do you spend on social media?*
  • Do you have Multifactor Authentication (MFA) associated with your social media accounts?*

  • Fantastic!

  • Good effort. We recommend setting up MFA for all your accounts.

  • We strongly recommend setting up MFA.

  • Scammers value social media accounts. If they gain access to your account they can take it over, steal any information about you held in the account, and impersonate you to scam your family or friends. They can also use it to blackmail you or seek a ransom to return control of the account. 

    Use MFA to put added protection on your account. Make sure you have a recovery account set up linked to a secure email address (not the one associated with your social media account) and use unique passwords for each.

    Be very wary of unexpected account code or money requests from people you know. Always call them directly before actioning any such requests.

     

  • Buying Online

  • How frequently do you buy goods online?*
  • If you do / or were to shop online, which platform would you most likely use?*
  • If you were to purchase an item from Facebook Marketplace and the seller wanted to communicate via email / WhatsApp / etc, would you continue to pursue the item?*
  • If you were to purchase a vehicle online from a private seller, would you provide an image of your drivers licence to prove your identity?*

  • Scammers operate on legitimate platforms and many are hard to tell apart from genuine sellers. They will often try to get you to communicate on another platform (i.e. email, WhatsApp, etc) so they can be anonymous while trying to scam you. Be wary of requests to move communications away from sales platforms. This is a tell-tale sign they are likely a scammer. 

    NEVER share images of your drivers licence, passport, or other identity documents to any personal account selling or buying goods. You should never need to pay for additional shipping or taxes after a purchase. This is likely an add-on to the scam to try get as much money out of you as they can.

  • You receive the following text messages around the same time you were expecting something to arrive by post.

  • Image field 105
  • Which text message would you believe is legitimate and would click the link?*

  • Strong awareness!

  • You may want to reconsider. Neither of these messages is legitimate but both are sophisticatedly designed to trick you. 

  • Always verify messages by logging onto the secure app or website to access your online account.

  • Online Communications

  • You receive the following messages.

  • Image field 78
  • How do you react?*

  • Always apply scrutiny and be careful if you recieve a message asking for money. Even though it may apear to come from your friend, origin names can easily be spoofed. Make sure you contact the person through known means to confirm the request is legitimate. Also look out for the terminolgy, spelling, and sentence structure that doesn't read correctly.

  • Image field 80
  • What do you do?*

  • Scammers will impersonate official sources such as banks to try get you to click on their links.
    Banks will never get you to verify identity or restore your account through text message links. 

  • Image field 82
  • What are your actions?*

  • Great actions!

  • Be very wary...

  • Stop and think twice when receiving strange or out of the ordinary messages, even if they appear to be from friends or family.

    Scammers can spoof the sender's details to appear to come from your contact or someone you may know or impersonate someone you may trust. 

    Contacting the relevant person via a separate known means will confirm if message is legitimate or not.

    Blindly replying, even if you know they are a scammer, will confirm you are a real person and that your number is active which could promote further scamming attempts. Best practice is to ignore and delete.

  • Compliance

  • If you received a phone call from one of the following organisations stating you owe them money - who would you most likely believe?*
  • If you received a phone call from one of the organisations stating you were about to be arrested - who would you most likely believe?*
  • If you received a phone call from one of the following organisations stating you had a virus on your computer - who would you most likely believe?*

  • The correct responses are None.

    lt is extremely rare that you would ever receive a call from these organisations at all let alone where they state you owe money, have an arrest warrant outstanding, or have a computer virus. Scammers try to trick you by pretending to be from legitimate organisations and in a position of authority to elicit compliance and gain access to your personal information, accounts or computer.

    Don't be afraid to hang up and do your own research through official channels.

  • Compliance Continued...

  • If you received an email from an unknown person who quoted your current password - what would you think?*

  • Chances of them being an expert hacker is extremely low.

    Almost always it will be a scammer that acquired your password through a data breach or previous scamming attempts.

    You should logon to your relevant accounts through the official channels to change your passwords.

  • You have been messaging a romantic interest online who you have never met in person before. One day, they message stating they have encountered some financial trouble and ask you for help. What do you do?*
  • You have been messaging a romantic interest online who you have never met in person before. One day, they ask you for intimate images of yourself - what do you do?*

  • This method of earning the trust of a victim is a common technique used by romance scammers and those engaged in sextortion schemes.

    They pretend to be genuine and often give excuses why they are unable to meet in person.

    Once they have enough trust they make their move and ask for money, or intimate material that they could use to extort for money.

    It is strongly recommended not to send any money or intimate material to someone you have never met in person, even if you have communicated with them via video chat and believe the person is real.

    It may often feel difficult to break contact with someone you've been connecting with, however, it almost certainly is all an act to steal your money rather than any genuine connection.

  • Pop-Ups and Alerts

  • While using your computer on the internet you receive the following messages:

  • Image field 116
  • What would you do?*
  • Image field 118
  • What would you do?*
  • Image field 170
  • Multiple pop-ups continually appear or won't close. What do you do?*

  • Great decisions!

  • Look a little closer.

  • Scam updates and virus alerts are becoming more sophisticated and can look very much like an authentic notification.

    Being aware of the subtle differences and when the notification was triggered helps to highlight whether it could be legitimate or not (i.e., within an internet browser, or after clicking a link).

    Do not ever click on the links or ring any tech support numbers from the alert windows - even where they include an 1800 number.

    Do your own virus scan using your own virus protection software and if needed call the numbers given on the official application or website.

    Holding Alt + F4 (for Windows) or Command Q (for Mac) or restarting the computer may assist if the pop up will not close easily.

  • Emails and Employment Searching

  • You receive the following emails.

  • Image field 128
  • How would you respond?*
  • Image field 130
  • How would you respond?*
  • Image field 132
  • After searching for jobs online you received this email. What do you do?*

  • Spot on!

  • Be vary careful.

  • Phishing emails and fake job opportunities are very prevalant. Spam filters unfortunately don't catch them all. If you think something seems out of place it often is.

    Never click on the links in unexpected emails. Always go through the official applications or websites for access and to change passwords.

    Always call the official business number for employment opportunities and confirm emails before sending any personal identification documents.

  • Cryptocurrency and Investments

  • Are you interested in online investments or cryptocurrency?*
  • Have you ever invested in cryptocurrency or another investment scheme online?*

  • If you believe you have been scammed - please lodge a get help form here: Lodge Get Help Form.

    Completion of this survey WILL NOT result in a case being lodged with IDCARE.

  • Image field 144
  • Image field 141
  • Online articles where celebrities like Mel Gibson, Waleed Aly, Ed Sheeran, Elon Musk and David Koch discuss financial growth in investments and cryptocurrencies are real.*
  • Would you believe that you could also make that money and click on the links to find out more?*
  • If someone steals or 'hacks' your crypto investment - there are companies online who can help you recover the stolen funds.*

  • Great decision!

  • Be very cautious.

  • Scammers and fraudsters will often use celebrities to trick you into believing a story and to click on a link. The promise to make 'big bucks' is almost certain to be a scam. Many links will direct you to platforms that look legitimate but are almost always scams ready to take your money.

    Scam websites may also display ASIC records, Australian Financial Services Licences (AFSL) and ABNs, but these can easily be scraped from other websites, and do not necessarily mean the service is legitimate.

    Always do your own research and use the 'scam' key word. Only use official platforms if you do invest.

    IDCARE is unaware of any 'real' recovery agency that can assist victims of fraud in recovering stolen cryptocurrency. 

  • Your Scam Resilience and Cyber Awareness Score is:

    {scamResilience} / 100

  • Image field 197
  • Image field 198
  • Would you like extra information and education via email?
  • Should be Empty: