What your child will learn
Identify the personal emotional triggers — fear, urgency, peer validation, desire to help authority figures — that attackers exploit on the student themselves
Apply a 3-step verification protocol (stop, verify through an independent channel, confirm) before responding to any unsolicited request for personal information or access
Recognize at least four social engineering manipulation levers — authority, scarcity/urgency, social proof, and reciprocity — when they are aimed at the student personally
Describe why middle-schoolers are particularly vulnerable to social engineering (developing prefrontal cortex, identity formation, peer-influence sensitivity)
Demonstrate how to respond to an authority-based in-person approach (an adult stranger asking for help or access) using the trusted-adult verification framework rather than accepting the authority claim at face value
How this mission works
Real attackers know that middle-schoolers are uniquely vulnerable: developing prefrontal cortex, identity formation, peer-influence sensitivity, and the desire to be helpful to authority figures all make a 6th–8th grader a prime target. In five scenes — a "school counselor" email asking for an override code, a winning-prize countdown pop-up, a Discord friend-of-a-friend V-bucks "giveaway," a stranger at school who needs you to walk them somewhere, and a boss-battle multi-vector text claiming to be a safety investigator — learn to spot the manipulation aimed at you, apply the stop-verify-confirm protocol, and route adults to other adults instead of escalating alone. Pass 4 of 5 scenes to earn the Social Engineering Aware badge and 150 XP.
What students actually encounter
A "school counselor" emails asking for your parent override code because of a "safety concern" — stack of authority + urgency + PII ask, on your personal email.
A friend-of-a-friend on Discord offers free V-bucks if you sign in at a "discord-gift" link — trust exploit + shared-interest gating + credential harvest.
A stranger at school asks you to walk them to the AV room — reciprocity escalation that ends with you alone in a less-populated area.
Cipher is with them the whole way
When a student gets stuck on Social Engineering Awareness, Cipher appears with a mission-specific nudge — no spoilers, just a hint toward the right thinking. Make a wrong choice, and Cipher explains the real-world consequence. Finish the mission, and Cipher generates a personalized performance debrief based on exactly how the student played it.
ISTE alignment
Students demonstrate personal responsibility for managing their own digital identity and learn to recognize social engineering tactics — authority impersonation, urgency pressure, trust exploitation, and reciprocity manipulation — that target the student themselves. Builds the in-person and digital verification habit required to refuse manipulation when it is aimed at them personally rather than at a third party.