Length
30 to 45 minutes.
What people should leave able to do
- Recognize pressure, secrecy, unusual payment, and code requests.
- Avoid links and numbers inside suspicious messages.
- Verify through a trusted official channel.
- Know where to get help if they already acted.
Running order
- Welcome and boundaries — 5 minutes. Scams can look professional, and asking for help is a strength. This is education, not individual legal, banking, or crisis advice.
- How the pressure works — 5 minutes. Urgency, threats, secrecy, unexpected contact, authority impersonation.
- Stop, Check, Verify — 10 minutes. Walk through the three steps using a safe, redacted example.
- Audience examples — 10 minutes. Use only approved public examples relevant to the group. Do not ask participants to display private messages or visit suspicious links.
- If it already happened — 5 minutes. The immediate steps, and your organization's local support path.
- Questions and handout — 5 minutes. General questions only. Do not collect private case details in the room or in an unapproved form.
Materials
- Stop Before You Tap poster
- Stop, Check, Verify guide
- A relevant, dated WatchOut alert insert
- Referral card
- If It Already Happened guide
- Your local resources page
Facilitator safety rule
If someone describes immediate danger, ongoing threats, financial loss, exploitation, or a safeguarding concern, follow your organization's established escalation process. Do not promise that CSRF can handle the case.