ABSTRACT

Online phishing scams are annoying, dangerous, and almost impossible to prevent (Sahingoz et al, 2019). However, they present a unique opportunity for educational exploitation. In this chapter, we suggest that if controlled and properly supervised, replying to phishing attempts can be a way to acquire hands-on experience about the criminal modus operandi. Furthermore, having contact with real scammers can provide an engaging way to introduce various cybersecurity-related topics to students.