Running a session

The running order

1. 0–2 min

   Open with a question, not a warning

   Ask: "Who here has had a message saying their KYC expires today?" Most hands go up. That does the work of ten minutes of explaining that this is common and it is not a personal failing.

2. 2–8 min

   Run kiosk mode on the screen

   Open /kiosk and let it cycle. Ask the room to call out scam or ordinary before each verdict appears. The two ordinary messages in the set are the important ones: people over-call scam, and being wrong about a real bank message is how they learn the difference.

3. 8–12 min

   The five rules

   Open /briefing on the screen. Read them out. Spend the time on the OTP one: explain that the code arrives because the caller pressed a button, which is why its arrival feels like proof and is the opposite.

4. 12–16 min

   Let them try it on a real message

   Ask people to open the tool on their own phone and paste something from their own inbox. This is the moment the session becomes useful rather than interesting.

5. 16–20 min

   What to do if it has already happened

   Say the number out loud: 1930, today, same day. Someone in the room has usually lost money and has not told anyone. Say that reporting late is still worth it, and that being caught says nothing about how careful they are.

Pages to have open

• /kiosk — cycles by itself. Space pauses, arrows step, F is fullscreen.
• /briefing — the five rules, large enough to read from the back.
• /quiz — if the room is small enough to do it together.
• /print/poster — print a few for the noticeboard afterwards.
• /print/card — hand these out. People take paper home.

Three things worth saying

• Being caught is not a sign of carelessness. These are written and tested to work, and they target people who are busy or worried. Saying this out loud is what gets someone to admit it has happened to them.
• The tool can be wrong. Say so. A room told a tool is infallible will stop thinking, and the tool is a second opinion, not a replacement for the habit of opening the bank’s own app.
• Nothing they paste is stored. People will ask. The checking runs on their own phone, and with no connection it physically cannot leave the device.

If someone stays behind

Usually someone will, and usually because it has already happened to them. The page they need is what to do in the first hour. If it happened today, the useful thing you can do is get them to call 1930 while you are still standing there.