Your students can copy a logo perfectly and still fall for a fake. That is not a carelessness problem, it is a reading problem - so this unit teaches them to read what the message asks for, before they answer it.

Spot the Phish! is a 13-page internet-safety unit for grades 3-5. It needs no devices, no logins and no accounts: every message in the pack is printed on paper, invented on purpose, and safe to hand out in a room with 30 children.

WHAT YOU GET - 13 pages as US Letter and A4 PDFs, the same 13 pages as an editable PowerPoint, and an answer sheet.

• The Five Bites: one cut-out page of desk badges a message can have - too good to be true, hurry, weird sender, asks you to keep a secret, wants a secret of yours. It is the only thing you have to teach, and it stays on the table all year.

• Six case cards to judge in pairs: a game-prize email, a gift-card text from "Mom", a school-office form, a pop-up, fan mail, and a calm note that is genuinely true. The argument about the last one is the lesson.

• A worked example the whole class annotates together, so the reading is modelled before it is expected.

• A secrets sort that separates a surprise party from a real secret, and the three sentences a child uses to tell a grown-up.

• Answer sheet with the verdict, the bites found and the next move for each card; differentiation for emerging readers; a letter home; and a standards map (CCSS reading, writing and speaking; ISTE 1.2 Digital Citizen and 1.3) that says which page shows each skill.

• An editable PowerPoint of all 13 pages, set up at US Letter page size with one common font. Change a name, swap a message, put your own school in the examples, or type the answer lines for a child who does not write on paper.

HOW IT RUNS - 40 minutes, printed on the teacher page: read the hook story, model one message, judge six in pairs, argue the two everyone split on, exit ticket. There is a 20-minute version for a short period and a partner-talk set for a full one.

WHY IT WORKS AT THIS AGE - an eight-year-old cannot tell a real company from a fake one by looking at the logo, and telling them to "never talk to strangers" gives them nothing to check. This pack replaces both with one question they can answer from the page in front of them: what is this message asking me to do, and would a real company ask that?

The senders are invented - Blockite Coins, Skyline School Office, PixelPop Support - so no child is ever shown a real brand's login page. The reporting routes on the planning page are US ones; swap them for your own, which is what a school counselor would want anyway. Nothing in the pack collects or stores pupil data.

One classroom, print as many copies as you need. If something here does not fit your room - reading level, language, your own school name in the examples - message me through my store and I will fix it.