PublishedISO 9001:2026 published 16 Sept 2026 · 2015 certificates must transition by 30 Sept 2029What changed →
Internal Auditor course (ISO 19011:2026):free until 31 Oct · then $59 for three monthsStart free now →

← Qlause Cyber Aware

Module 13 · 11:00 video + 10-question quiz

QR Codes, Fake Pop-ups and the Click Fix

Three tricks that don't break in but get you to do the work: the click fix (the fake "verify you are human" box that makes you run a password stealer with three keys — the most common way in during 2025, more than phishing), QR codes (a link you can't read: the parking-meter stickers, the parcels, the "verify your account" codes by email), and the fake pop-up with a phone number (tech-support fraud: more than $2 billion lost in 2025). The rules: a website never needs your keyboard shortcuts; look before you scan and never pay from a sticker; a warning with a phone number is a scam; updates come from settings or IT; and if you did it, speed beats shame.

Loading your module video…

The scenario

Wednesday, 08:40 — you need a data sheet, and the first search result says "Verify you are human: press Windows + R, Ctrl + V, Enter." You do it. On Friday IT calls: a password stealer ran for four minutes.

The habit this module drills

If a screen tells you what to press, scan or call — stop.

After this module you can

What this module evidences: ISO/IEC 27001:2022 clause 7.3 (awareness) and Annex A control A.6.3 (information security awareness, education and training); POPIA Regulation 4(1)(e) (the Information Officer's duty to see that internal awareness sessions are held). The quiz result is recorded against your account, and passing it earns this module’s dated certificate.

Module 13 quiz

Ten “what would you do” scenario questions. Pass mark 80% — retake as often as you like. Pass it and this module’s certificate is issued in your name with the date; it is due again in twelve months. The quizzes and certificates come with a 12-month licence — for one person or for your company.

Loading…

Security awareness & ISO 27001

Building security awareness or an ISMS at your organisation?

Rolling out awareness training, preparing for ISO 27001, or working through what POPIA or GDPR means for your team? Tell us where you are. We'll look at it and suggest a practical next step, or connect you with people we trust who can help.

Email hello@qlause.app

No sales pitch, no obligation — we read every message.