MODULE 18 — Workplace Online Safety & Professional Conduct
Protect your work email, reputation, company data and future career from online threats.
💼 Why Workplace Online Safety Matters
Scammers don’t just attack home users. They target workplaces, companies, charities, clubs and schools — because one successful email can unlock thousands or millions of pounds, plus sensitive data.
- Spot scams in work emails, HR messages and invoices
- Recognise fake recruiters and LinkedIn predators
- Protect client/staff data and HR privacy
- Stay professional online and avoid conduct breaches
Think of this as self-defence for your job, reputation and organisation. 🛡️
🚨 The Big Workplace Threats
Online dangers at work usually fall into four big categories:
- Work emails targeted – phishing, fake CEO messages, malware links.
- Fake invoice scams – edited bank details, cloned suppliers.
- HR & privacy breaches – leaked staff data, dodgy “update” forms.
- LinkedIn predators & job phishing – fake recruiters, job offers and investors.
Never move money or share sensitive info based on a single unexpected message.
Pause, verify on a different channel, and follow your organisation’s procedures.
👔 CEO / Manager Impersonation Simulator
One of the most expensive work scams is when criminals pretend to be a senior manager and pressure staff into sending money or data.
You receive an email that looks like it’s from your CEO, marked “URGENT & CONFIDENTIAL”. They ask you to transfer £8,500 to a new supplier account within the next 20 minutes and say you must not speak to anyone else as it could “jeopardise the negotiation”.
📑 Fake Invoice Detector
Invoice scams can drain huge amounts from organisations. Can you spot which invoice is more suspicious?
Invoice A
Supplier: Office Essentials Ltd
Invoice No: OE-2025-1432
Bank: UK Business Bank
Sort code: 40-11-22
Account: 12345678
Details match previous invoices on record.
Invoice B
Supplier: Office Essentials Limited
Invoice No: OE-2025-1432-NEW
Bank: UK Business Bank
Sort code: 40-11-22
Account: 87654321
Email: payments@office-essentialsltd-pay.com
📨 Job Phishing & Fake Employer Messages
Scammers pose as employers or recruiters, especially via email and LinkedIn. See if you can tell which is safer.
Subject: Immediate Job Offer – No Interview Required Dear Candidate, We have reviewed your social profile and are pleased to offer you a remote admin role paying £48,000/year. You do not need an interview. Simply click the link below to complete pre-employment checks and upload a copy of your passport and bank card (front and back): http://instant-job-offer-checks.com This link expires in 2 hours.
Subject: Invitation to Interview – Operations Assistant Dear [Your Name], Thank you for your application for the Operations Assistant role. We would like to invite you to a 30-minute interview via Microsoft Teams. Please note, we will never ask you to share card PINs or full passwords. Any documents will be handled through our secure HR portal only. Best regards, HR Team [Recognised Company Name]
🤝 LinkedIn Predators & Fake Recruiters
Not every professional-looking profile is genuine. Tap each card to reveal how the trick works.
🧾 HR Privacy & Payroll Scams
Criminals love HR and payroll, because those teams handle names, addresses, salaries and bank details.
An email arrives in HR claiming to be from an employee, asking to update their salary bank account. The sender address is slightly different to the one on file.
🔒 Workplace Data Privacy Wall
At work, “data” isn’t just IT talk. It’s people’s lives: salaries, addresses, medical notes, performance reviews.
Keep names, addresses, phone numbers and emails within approved systems — not on random USB sticks or personal email accounts.
Extremely sensitive. Should never be shared in group chats or left on printers or open screens.
Budgets, invoices and contracts must be stored securely, not uploaded to public drives or shared with unauthorised contacts.
Never share passwords, one-time codes or security answers, even with colleagues. Use role-based access instead.
📎 Malicious Attachments Mini-Game
Not all file types are equal. Some are higher risk for malware.
Which attachment would you be most careful with?
✉️ Phishing Email Dissector
Tap different parts of this suspicious email to highlight red flags.
🌐 Workplace WiFi & Remote Work Safety
Working from cafés, trains or home? Small mistakes can expose company data.
Avoid logging into sensitive systems on open WiFi. If you must, use a VPN and only approved company devices.
People behind you can read your screen. Use privacy filters and be aware of who is nearby when handling private data.
Personal devices may lack security tools and policies. Follow your organisation’s rules on where you can access work data.
Lock your screen when away from your desk and use automatic timeouts so devices aren’t left logged in and unattended.
👩💻 Professional Online Conduct
What you post, comment and share can affect your job and your organisation.
Tap each example to see if it’s safe or risky:
🧱 Online Bullying & Harassment at Work
Workplace harassment isn’t just face-to-face. It happens over email, group chats and social platforms too.
- Repeated negative comments in group chats targeting one person.
- Sharing humiliating memes or edited photos of colleagues.
- Leaving someone out of important online conversations on purpose.
- Using work systems to send insults, threats or abuse.
📘 Quick Workplace Scenarios
Swipe through realistic mini-stories. Each shows a different online risk.
✅ Your Workplace Online Safety Checklist
Use this as a quick mental review next time something feels “off” at work.
- ☑ I never move money based only on an email or chat message.
- ☑ I verify bank detail changes with trusted contacts.
- ☑ I treat all urgent, secret requests as suspicious until checked.
- ☑ I don’t share passwords or one-time codes with anyone.
- ☑ I avoid posting about internal issues or confidential info online.
- ☑ I lock my screen when away and keep files secure.
- ☑ I report suspicious emails, links or behaviour to the right team.
🧪 Advanced Workplace Threat Lab
Tap a tile below to explore advanced real-world threats in a fun, bite-sized way.
Tap a topic to explore it.
In this lab you’ll see how tiny details — a header line, a QR code, a USB stick, a rushed reply — can open the door to major data breaches.
Pick any tile to see a realistic scenario, how attackers exploit it, and how you can shut it down.
🧠 Workplace Online Safety & Conduct Quiz (20 Questions)
Check your understanding of emails, HR, LinkedIn, behaviour and job scams.
🏅 Module Complete – Workplace Safety Champion
Remember:
- Your actions online can protect or expose your whole organisation.
- Pause, verify and follow procedure — even if the request looks important.
- Professional behaviour online is part of your personal safety toolkit.
You can replay this module, use it in staff training, or move on to the next Aware360 Pro safety topic.
