When we first realized that “click here” isn’t always a good idea

June 2025

“I got a message from the bank,” said Ms. Nada as she opened her email. “It says I have to confirm my information immediately, or else my account will be blocked.”

On the screen was a message with the bank’s logo, a polite greeting, and a large blue button: “Click here to confirm.”

“I almost clicked it,” she added. “But then I thought I’d better ask.”

The classroom fell silent. Situations like this aren’t rare, but each one is a learning opportunity.

We opened the message and took a closer look. The sender’s address wasn’t official. The language was a bit unusual. The link led to a website that didn’t match the bank’s name.

“This isn’t a bank,” we concluded together.

Ms. Nada fell silent for a moment. “If I had clicked…”

She didn’t finish the sentence. She didn’t need to.

Scams used to work differently

Scams used to require a physical presence or at least a phone call. Someone would knock on the door. Someone would call and introduce themselves. You could recognize the tone of voice, the face, the surroundings.

Today, scams come in the form of a message. Polished, professional, with real logos. Sometimes even with our name.

The digital world makes it possible for the fake to look real.

That is why DigComp-Competence 4.2—protection of personal data—is not separate from Competence 1.2—information evaluation. It is not just about technical protection, but about the ability to judge.

A Click as a Decision

A click is a small action. Almost a reflex. But in the digital world, it can have major consequences.

At UPI Žalec, we have analyzed cases of fake messages on several occasions. Participants initially pay attention to the logo and colors. They rarely look at the sender’s address. Even more rarely do they check the URL of the link.

When we break down the elements together, it becomes clear that judgment isn’t automatic. It requires focus.

“But it looks totally real,” said one of the participants.

And indeed—that is precisely where the danger lies.

Between Trust and Caution

The digital environment is built on trust. We trust that the website we visit is secure. That a message really is from the sender. That a link is legitimate.

But at the same time, we must cultivate a healthy dose of skepticism.

This isn’t cynicism. It’s digital maturity.

When Ms. Nada didn’t click right away but asked instead, she demonstrated two skills at once: protecting her data and the ability to evaluate information.

She didn’t react impulsively. She paused.

Learning Through Real-Life Examples

As part of the project, we realized that abstract warnings aren’t enough. The phrase “Watch out for phishing” feels distant unless we connect it to a real-life example.

That’s why we analyze actual messages. We look for inconsistencies. We consider what would happen if we entered our information. We discuss how banks typically communicate.

Participants begin to notice details: small errors in language, unusual requests, and pressure to act immediately.

Digital security becomes a way of thinking, not just a rule.

Reflection within the Organization

As an organization, we have also asked ourselves how we communicate with participants. Are our messages clear enough that no one would mistake them for false information? Do we use verified channels? Do we encourage questions?

If we want individuals to develop critical thinking, we must create an environment where doubt is permitted.

At UPI Žalec, we do not want participants to trust blindly. We want them to know how to verify information.

“I almost clicked”—a valuable lesson

When Ms. Nada uttered that sentence, she wasn’t admitting a mistake. She was demonstrating that she had learned something.

She would have clicked before. This time, she didn’t.

Digital literacy isn’t the absence of danger. It’s the ability to recognize danger.

In a world where there are hundreds of links, notifications, and calls to action every day, perhaps the most important skill is this: to pause.

Not because we fear technology. But because we understand that not all information is equal.

When we develop this ability, the digital world does not become less complex. It becomes more manageable.