Part II · Instructor's Manual

Chapter 9 · A handbook for practitioners

Ready-made workshop scenarios

Five complete, ready-to-use scenarios. Each follows the same structure: objective, duration, level, materials, a step-by-step procedure, red flags, discussion questions, and an "if-then" plan.

Recommended order for a beginner group

1. A call from the "bank"

Low emotional threshold, easy-to-recognise cues, builds confidence.

2. A text message with a link

A practical exercise in reporting to 8080, teaches a specific skill.

3. Manipulation in a store

Switching channels (offline), a lighter tone, an exercise in assertiveness.

4. The "grandchild scam"

Higher emotional intensity, but the group is already warmed up and feels safe.

5. A fake investment

Requires more context, best placed at the end of the cycle.

For an advanced group or a booster session: start with level 2 or 3 of any scenario.

Scenario 1: A call from the "bank"

Objective

The participant recognises a fraudulent call from a "bank employee" and knows how to respond.

Duration

20–25 minutes

Level

1 (basic)

Materials

Escalation Card, Z-Z-Z Card

Step-by-step procedure

  1. The facilitator explains the situation: "Let's imagine a participant is sitting at home and the phone rings. The person on the other end says they're a bank employee and that someone has tried to hack the account. They ask for the password to secure it."
  2. The facilitator sets the scene and offers three roles.
  3. The facilitator plays the "bank employee" for 3–5 minutes. They speak in a professional, calm voice. They apply pressure: "This is urgent," "Please provide your password immediately."
  4. The facilitator ends the simulation: "Thank you. Let's debrief."
  5. A three-phase debrief.
  6. Hand out the Escalation Cards.

Red flags

  • A bank never asks for a password over the phone
  • Time pressure ("this is urgent, right away")
  • A request for data (password, SMS code, card number)

Discussion questions

  • "How did you feel?"
  • "What in this conversation should have raised your suspicion?"
  • "What should we do in such a situation, step by step?"

"If-then" plan: "If someone calls and says they're from the bank and asks for a password or code, then I say: 'I need to verify this,' and hang up. Then I call the bank myself using the number on my card."

What to watch out for as a facilitator

A good first scenario for a new group. Usually has a low emotional threshold. If the group finds it too easy, move on to Level 2.

Harder version (Level 2)

The "bank employee" doesn't ask for a password, but asks the participant to install a remote-access app "to secure the account." More subtle, since it doesn't sound like a request for data.

Harder version (Level 3)

The number on the display is the bank's real number (spoofing). The "employee" knows the participant's full name. Key rule: a phone number can lie. The only safe method is to hang up and call back yourself.

Scenario 2: A text message with a link

Objective

Participants recognise a fake text message and know what to do with it (don't click, forward to 8080).

Duration

15–20 minutes

Level

1 (basic)

Materials

A large printout of a fake text message, participants' phones

Step-by-step procedure

  1. The facilitator shows a large printout of the text message: "Your package is waiting at the pickup point. Additional fee: 2.50 zł. Click: [link]."
  2. They ask the group: "Who among you has ever received a text like this? What did you do with it?"
  3. Group discussion: what should raise suspicion?
  4. Hands-on exercise: "I'll show you how to forward a text to 8080." The facilitator demonstrates step by step. Participants try it themselves. The co-facilitator assists.

Red flags

  • A link in a text from an unknown sender
  • A small amount (doesn't raise suspicion, but the link steals card data)
  • No courier company name or tracking number
  • Vague content with no details

Discussion questions

  • "Why do scammers ask for such a small amount?"
  • "How can you tell if a text message is real?"

"If-then" plan: "If I get a text with a link about a package I didn't order, then I won't click it — I'll forward it to 8080 and delete it."

What to watch out for as a facilitator

Requires practice on phones; a co-facilitator is very helpful. Be prepared to walk through the steps on different phone models. Don't use real links or actual company names in the printed text.

Harder version (Level 2)

A text without a link, asking the recipient to call back a provided number.

Harder version (Level 3)

The text contains the participant's real address (from a data breach), creating a false sense of credibility. Key rule: personal data is not proof of legitimacy.

Scenario 3: A fake investment

Objective

Participants learn to recognise a fake investment offer and know how to verify it.

Duration

20–25 minutes

Level

1 (basic)

Materials

A printout of a fake ad (celebrity's face blurred), information about csirtknf.pl

Step-by-step procedure

  1. The facilitator shows the printout of the ad: "I made 50,000 zł in 3 days! You can too! Minimum investment: 1,000 zł."
  2. Group analysis: what should raise suspicion?
  3. The facilitator adds context: according to CSIRT KNF, nearly ninety percent of the fake domains detected in 2024 related to fraudulent investments.
  4. Exercise: "How do you verify an offer?" The facilitator demonstrates visiting csirtknf.pl and checking the warning list.

Red flags

  • A promise of guaranteed returns (there is no such thing)
  • A famous face in the ad (an image is not proof)
  • Pressure — "you can do it too", "minimum amount"
  • No information about risk

Discussion questions

  • "Why do scammers use the faces of famous people?"
  • "Do guaranteed returns exist?"
  • "What do you do if a 'consultant' calls saying the returns are growing?"

"If-then" plan: "If someone promises me a sure, fast profit, then I know that's a very strong sign of a scam. I don't give out data, and I check csirtknf.pl."

What to watch out for as a facilitator

May trigger strong emotions in people who have lost money on a fake investment. Don't name specific celebrities. If asked "who did they use?", answer in general terms.

Harder version (Level 2)

A "consultant" patiently guides the participant through a form on a professional-looking platform.

Harder version (Level 3)

A deepfake video of a bank CEO on a platform with a dashboard showing "growing profits."

Scenario 4: The "grandchild scam"

Objective

The participant recognises an emotional scam and knows how to verify the caller's identity.

Duration

20–25 minutes

Level

1 (basic)

Materials

Escalation Card, information about the family password

Step-by-step procedure

  1. The facilitator plays the scammer, speaking in a choked voice: "Grandma? It's me... I've been in an accident... I need money for bail... Don't tell Mom..."
  2. The simulation lasts 3 minutes. The facilitator uses emotional manipulation: desperation, a request for secrecy, time pressure.
  3. A three-phase debrief.
  4. Introduce the tool: the family password.

Red flags

  • Emotional tone, desperation
  • A request for money
  • An order not to tell the family
  • No specific details (which hospital, what happened)

Discussion questions

  • "How did you feel?"
  • "What should have raised your suspicion?"
  • "How can you verify it's really your grandson?"

"If-then" plan: "If someone calls and says they're my grandson and needs money, then I say: 'I need to check this,' hang up, and call my grandson myself on a number I know."

Tool: the family password

A word or phrase known only to your family. "If my grandson calls and asks for money, I'll ask for the password. If he doesn't know it, I know it's not him." Encourage: "Talk to your family tonight about setting a password."

What to watch out for as a facilitator

The highest emotional potential of all the scenarios. The co-facilitator should be ready for tears. Don't play the scammer too intensely. Make sure the debrief starts with the emotional phase.

Harder version (Level 2)

A request for a BLIK payment or an immediate transfer. Key message: in practice, a request for BLIK over the phone is a very strong sign of fraud.

Harder version (Level 3)

Deepfake audio; the voice sounds like a real grandchild. Key rule: even a familiar voice can be faked — verify through another channel.

Scenario 5: Manipulation in a store (demonstration / sales pitch)

Objective

Participants recognise manipulation techniques used during demonstrations and know how to say no.

Duration

15–20 minutes

Level

1 (basic)

Materials

"Demonstration/tour" mini-checklist (A6), information on consumer rights

Step-by-step procedure

  1. The facilitator plays a salesperson, approaching with a "free gift": "You're our lucky winner! A free health checkup! Just sign this consent form. And by the way, we have a fantastic set of supplements at a special discount — but only today."
  2. Discussion: what should raise suspicion?
  3. The facilitator explains the law: 14 days to withdraw from a contract made off-premises. Note the exception: if the consumer schedules a home visit themselves, the restrictions may not apply.
  4. An assertiveness exercise in pairs: the "broken record" technique.

Red flags

  • A free gift that comes at a price
  • "Today only" pressure
  • A request for a signature
  • Mixing free items with paid ones

Discussion questions

  • "Why is it hard to say no?"
  • "Which is worse: feeling rude, or losing money?"

Phrases to practise (the "broken record" technique)

  • "I'm not signing anything on the spot."
  • "I'm not paying today; I'll come back after consulting someone."
  • "Please give me the documents in writing."
  • "No, thank you."

"If-then" plan: "If someone gives me something for free and then asks for a signature or money, then I say: I'm not signing on the spot, I'll come back after consulting someone."

What to watch out for as a facilitator

Emotionally lighter, good as a second or third scenario. Start with a demonstration alongside a co-facilitator. Humour helps a lot here.

Harder version (Level 2)

The salesperson is very friendly, talks about health, and builds rapport. It's harder to say no to someone who's nice.

Harder version (Level 3)

A "health consultant" booked by phone arrives at the senior's home. UOKiK notes that if the consumer schedules the visit themselves, the restrictions may not apply.

Full methodology

This was Chapter 9. The full methodology covers 19 chapters. Released under a Creative Commons CC BY-SA 4.0 licence.

← Chapter 8 Chapter 10: Challenging situations in the workshop →