אוסף אמין שנבנה מתוך ניסיון כיתתי עשיר על ידי שני מורים פעילים בהוראת אנגלית.

זה עובד. זה בדוק. פשוט, קל ובחינם.

The Real Hustle: 1 · The Street Scam 2 · The Long Con 3 · The Digital Trap 4 · Caught in the Act
The Real Hustle · Lesson 3 of 4
Teacher's Lesson Plan
Confidential 📄 Student Handouts →
Lesson Overview
Series
The Real Hustle — Lesson 3 of 4. Anna has exposed a street scam and a long con. Now she turns to the fastest-growing area of fraud: digital crime.
This lesson
Lesson 3 — The Digital Trap. Phishing emails, fake websites and identity theft are spreading at an unprecedented rate. Anna is currently working undercover, posing as a potential victim to expose a sophisticated online fraud network. The investigation is ongoing — and increasingly dangerous.
Level
B2
Duration
90 minutes
Skills
Reading · Listening · Speaking · Writing (+ Vocabulary + Grammar)
Grammar
Present Progressive — what is happening right now in the investigation; actions in progress
Future Progressive — actions that will be in progress at a future moment; planned ongoing actions
Passive (advanced) — passive across multiple tenses; passive with modals; impersonal passive constructions
Vocabulary
10 words (B2): phishing · impersonate · breach · encrypt · vulnerability · intercept · algorithm · credentials · exploit · counterfeit
Materials
Student Handouts 1–6 (printed); whiteboard; this plan
Key Grammar — Teaching Notes
Present Progressive — actions happening now

At B2, students know basic Present Progressive. This lesson focuses on three less-practised uses:
1. Action in progress at this moment: Anna is currently working undercover inside the fraud network.
2. Temporary situation: Digital fraud is growing faster than any other category of crime.
3. Future arrangement (scheduled): Anna is meeting her contact at the drop box tomorrow at noon.
Useful adverbs: currently · right now · at the moment · increasingly · rapidly

Future Progressive — actions in progress at a future moment

The Future Progressive is often underused at B2. Key uses:
1. Action in progress at a specific future time: At this time tomorrow, Anna will be presenting her findings to the editor.
2. Expected ongoing action: The scammers will be monitoring her activity throughout the operation.
3. Polite/natural enquiry about future plans: Will you be attending the security briefing on Friday?
Contrast with Future Simple: "She will present" (completed event) vs "She will be presenting" (in progress at that moment)

Passive — advanced forms

This lesson extends passive beyond Present/Past to include:
Future passive: The data will be encrypted automatically.
Modal passive: The network can be breached without the user knowing. / Passwords should be changed every ninety days.
Progressive passive: Thousands of accounts are being targeted right now.
Perfect passive: The servers have been compromised. / The data had been stolen before the breach was detected.
Impersonal passive: It is estimated that online fraud costs the economy £3 billion annually. / It is believed that the network operates from three countries.

Lesson Procedure
Time
Stage
Skill
Teacher does
Students do
0–7 min
Lead-in
Speaking
Review series so far. "Have you ever received a phishing email? What did it say?" Board: "It is estimated that 3.4 billion phishing emails are sent every day." React.
Recall Lessons 1–2. Share phishing experiences. React to the statistic.
7–16 min
Vocabulary
—
10 B2 digital crime words. Concept-check phishing, breach, credentials. Part B gap-fill.
Part A: read + self-test. Part B: gap-fill.
16–46 min
Grammar
—
Present Prog uses → Future Prog (contrast with Future Simple) → Passive extended forms → exercises 1–5.
Study cards. Exercises 1–5. Pair-check.
46–58 min
Reading
Reading
Gist: "What is Anna doing right now? What is the scale of the operation?" Identify passive forms. Tasks 1–2.
Read Anna's undercover report. Identify passives. Questions. T/F/NG.
58–70 min
Listening
Listening
Context: "Anna's recorded call with a cybersecurity expert." Read TWICE.
MCQ. Notes. Grammar hunt.
70–82 min
Speaking
Speaking
Role-play (expert/journalist) + panel debate. Monitor Prog and Passive forms.
Role-play. Panel discussion. Debate.
82–90 min
Writing
Writing
100–120 words. Undercover situation report or cybersecurity advisory. All 3 structures.
Write the report. Self-check.
Listening Script — 'Everything Is Being Monitored'
Read aloud twice at a clear B2 pace. Do not show to students during the tasks.
Anna:
Dr. Chen, I'm currently working undercover inside a digital fraud network. Can you give me a sense of the scale of what's happening?
Dr. Chen:
It's enormous. At this moment, thousands of phishing campaigns are being run simultaneously across the world. Credentials are being harvested on an industrial scale. It is estimated that over three billion phishing emails are sent every single day.
Anna:
The network I'm looking at is using a fake banking website. How is that kind of site built, and how does it stay up?
Dr. Chen:
These sites are being hosted on compromised servers — servers that have been hacked without the owner's knowledge. The fake site is constantly being updated to look more convincing. It can be taken down by authorities, but by then the damage has already been done. The data has been extracted. It has been sold. In some cases it will be resold multiple times.
Anna:
What will be happening to my data if I click the link in one of these emails?
Dr. Chen:
The moment you click, your keystrokes are being recorded. Your credentials are being captured in real time. By the time you realise something is wrong, your passwords will already have been changed. Your accounts will be locked. It is believed that most victims don't discover the breach for an average of two hundred days.
Anna:
Will you be attending the cybercrime conference in Brussels next week?
Dr. Chen:
I will be presenting there, yes. The topic is regulation — specifically, whether internet service providers can be held legally responsible for facilitating fraud. It should be noted that this legislation is currently being drafted in three European countries. Something is changing. Not fast enough — but it is changing.
Grammar in the script:
· Present Prog: I'm currently working / are being run / are being harvested / is being hosted / is constantly being updated / are being recorded / are being captured / is currently being drafted
· Future Prog: will be happening / will be presenting / will be attending
· Passive: are being run · credentials are being harvested · have been hacked · being updated · can be taken down · has been extracted · has been sold · will be resold · your passwords will already have been changed · will be locked · it is estimated · it is believed · can be held · should be noted · is currently being drafted
Answer Key
Handout 1 — Vocabulary
1. phishing   2. impersonate   3. breach   4. encrypt   5. vulnerability   6. intercept   7. algorithm   8. credentials   9. exploit   10. counterfeit
Handout 2 — Grammar
Ex 1 (identify): 1. Pres Prog   2. Fut Prog   3. Passive (Pres Prog)   4. Pres Prog   5. Fut Prog   6. Passive (modal)   7. Pres Prog   8. Passive (imperf)   9. Fut Prog   10. Passive (Pres Prog)

Ex 2 (complete): 1. is currently working (Pres Prog)   2. are being targeted (Passive Pres Prog)   3. will be presenting (Fut Prog)   4. can be intercepted (Passive modal)   5. is growing (Pres Prog)   6. will be monitoring (Fut Prog)   7. is estimated (Passive impersonal)   8. are being tracked (Passive Pres Prog)   9. will be running (Fut Prog)   10. should be changed (Passive modal)

Ex 3 (make passive): 1. Thousands of accounts are being targeted by the network right now. 2. Your data will be sold within minutes. 3. The servers have been compromised by unknown attackers. 4. Passwords should be changed every ninety days. 5. It is estimated that 3 billion phishing emails are sent daily.

Ex 4 (Prog vs Simple): 1. will be presenting (Fut Prog — in progress at that moment)   2. will present (Fut Simple — completed event)   3. is meeting (Pres Prog — future arrangement)   4. will be monitoring (Fut Prog — ongoing throughout)   5. is working (Pres Prog — temporary situation)

Ex 5 (errors): 1. are being targeted (Passive Pres Prog — NOT 'are targeting')   2. will be presenting (Fut Prog — NOT 'will presenting')   3. can be intercepted (Passive modal — NOT 'can intercepted')   4. It is estimated (impersonal passive — NOT 'It is estimating')   5. is currently being drafted (Passive Pres Prog — NOT 'is currently drafting')
Handouts 3 + 4
Reading T/F/NG: 1 T   2 F (the average is 200 days, not 30)   3 T   4 NG   5 T
Listening Task 1: 1-B   2-C   3-A

Task 2: (1) are being run / credentials being harvested   (2) compromised servers / being updated   (3) are being recorded / being captured   (4) will be presenting / regulation   (5) is currently being drafted / three European countries
The Real Hustle · Lesson 3 of 4

The Digital Trap

Student Handouts
Name:  
Date:  
Class:  

Handout 1

Vocabulary

Vocabulary
Part A — Key Words
Word
What it means
phishing
sending fake emails or creating fake websites to steal personal information or money
impersonate
to pretend to be someone else — criminals impersonate banks, governments and trusted companies
breach
an illegal entry into a computer system — a data breach can expose millions of people's private information
encrypt
to convert data into a code that only authorised users can read — sensitive data should always be encrypted
vulnerability
a weakness in a system that can be exploited — software vulnerabilities are discovered and sold on dark web marketplaces
intercept
to secretly stop and read a communication before it reaches its intended recipient
algorithm
a set of rules or instructions that a computer follows — phishing algorithms can send billions of targeted emails per day
credentials
proof of identity such as a username and password — never share your credentials with anyone
exploit
to take advantage of a weakness — criminals exploit software vulnerabilities to gain access to systems
counterfeit
fake but designed to look real — counterfeit websites are built to look identical to genuine banking sites
Part B — Fill in the Gaps
1.Anna received a __________________ email that appeared to come from her bank — the design was perfect.
2.The criminals __________________ a senior government official to gain access to classified systems.
3.The data __________________ exposed the private information of over forty million customers.
4.All financial transactions are __________________ — but the criminals had already found a way around the encryption.
5.The team found a critical __________________ in the bank's login system that had gone undetected for two years.
6.The messages were being __________________ before they reached their destination — the criminals read everything.
7.The network uses a sophisticated __________________ to identify the most vulnerable targets and send personalised fake messages.
8.Never enter your login __________________ on a site you haven't verified — the address bar must show a padlock.
9.The criminals were __________________ a known software bug to gain administrator access to corporate accounts.
10.The __________________ website was so convincing that even experienced IT staff were initially deceived.

Handout 2

Grammar

Grammar
Three Structures — The Language of Digital Crime
PRESENT PROGRESSIVE
Actions in progress right now, or temporary ongoing situations.
Anna is currently working undercover inside the network. (happening now)
Digital fraud is growing faster than any other category of crime. (ongoing trend)
Thousands of accounts are being targeted right now. (passive — in progress)
Anna is meeting her contact tomorrow at noon. (future arrangement)
Key adverbs: currently · right now · at the moment · increasingly · rapidly
FUTURE PROGRESSIVE
An action that will be in progress at a specific future moment.
At this time tomorrow, Anna will be presenting her findings. (in progress then)
The scammers will be monitoring her activity throughout the operation. (ongoing)
Will you be attending the conference on Friday? (polite enquiry)
Contrast: "She will present" (completed event) vs "She will be presenting" (in progress at that moment)
PASSIVE — ADVANCED FORMS
The passive across multiple tenses — essential in crime and technology reporting.
Progressive: Accounts are being targeted. / Data is being harvested.
Perfect: Servers have been compromised. / The data had been stolen.
Future: Your password will be changed automatically.
Modal: The network can be breached. / Passwords should be changed.
Impersonal: It is estimated that 3 billion phishing emails are sent daily.
Impersonal: It is believed that the network operates from three countries.
Exercise 1 — Identify the Structure

Write: Pres Prog · Fut Prog · Passive (with tense or type)

1.Cybercriminals are increasingly targeting small businesses rather than large corporations.   [          ]
2.At this time next week, the investigation team will be reviewing all the evidence.   [          ]
3.Millions of email accounts are being scanned for vulnerabilities right now.   [          ]
4.The fraud team is currently analysing the fake website's server logs.   [          ]
5.Anna will be presenting her full investigation report at the conference on Thursday.   [          ]
6.All sensitive files must be encrypted before they are transmitted over the network.   [          ]
7.Phishing attacks are becoming more sophisticated as AI tools become widely available.   [          ]
8.It is estimated that identity theft costs the global economy over fifty billion dollars annually.   [          ]
9.The security team will be monitoring the network continuously throughout the night.   [          ]
10.Your login credentials are being transmitted across an unencrypted connection.   [          ]
Exercise 2 — Complete the Sentences

Use the structure in brackets.

1.Anna __________________ (work) undercover inside the phishing network for the past week. [Pres Prog]
2.Thousands of accounts __________________ (target) by the network at this very moment. [Passive Pres Prog]
3.At this time tomorrow, Anna __________________ (present) her findings to the cybercrime unit. [Fut Prog]
4.Communications sent over this network __________________ (intercept) without proper encryption. [Passive modal — can]
5.The number of phishing attacks __________________ (grow) by 400% every year. [Pres Prog]
6.The criminals __________________ (monitor) all incoming traffic throughout the operation. [Fut Prog]
7.__________________ (estimate) that over three billion phishing emails are sent every day. [Passive impersonal]
8.Your keystrokes __________________ (track) from the moment you clicked the link. [Passive Pres Prog]
9.The cybercrime unit __________________ (run) a sting operation for the next two weeks. [Fut Prog]
10.Passwords __________________ (change) every ninety days for maximum security. [Passive modal — should]
Exercise 3 — Make It Passive

Rewrite in the passive. Keep the same tense.

1.  "The network is currently targeting thousands of accounts."
___________________________________________________________________________
2.  "Criminals will sell your data within minutes."
___________________________________________________________________________
3.  "Unknown attackers have compromised the servers."
___________________________________________________________________________
4.  "You should change your passwords every ninety days."
___________________________________________________________________________
5.  "Researchers estimate that 3 billion phishing emails are sent daily."
___________________________________________________________________________
Exercise 4 — Progressive or Simple?

Choose the correct form. Think about whether the action is in progress or completed.

1.At this time tomorrow, Anna __________________ (will present / will be presenting) her full report to the editor. [in progress at that moment]
2.Anna __________________ (will present / will be presenting) her report at 3pm and then leave. [completed event]
3.Anna __________________ (meets / is meeting) her contact at the café tomorrow — it's all arranged. [future arrangement]
4.The security team __________________ (will monitor / will be monitoring) all activity throughout the 24-hour operation. [ongoing throughout]
5.Anna __________________ (works / is working) undercover right now — she can't take your call. [temporary situation]
Exercise 5 — Find and Correct the Error

Each sentence has ONE mistake.

1.  "Thousands of accounts are targeting by the phishing network right now."
Corrected: ___________________________________________________________________
2.  "At this time tomorrow, she will presenting her findings."
Corrected: ___________________________________________________________________
3.  "Your data can intercepted if you use an unsecured network."
Corrected: ___________________________________________________________________
4.  "It is estimating that 3 billion phishing emails are sent every day."
Corrected: ___________________________________________________________________
5.  "New cybercrime legislation is currently drafting in three EU countries."
Corrected: ___________________________________________________________________

Handout 3

Reading

Reading
Anna's Undercover Report — Inside the Phishing Network
Right now
Anna is currently posing as a small business owner seeking investment advice. She is operating inside an online network that is actively harvesting financial credentials from thousands of users. At this moment, fake versions of seventeen major banking websites are being maintained by the group. Users are being redirected to these sites through targeted phishing emails. The emails are generated by an algorithm that analyses social media data to produce personalised messages. It is estimated that the operation generates over two million euros in fraudulent transfers every month.
The method
The network is exploiting a known vulnerability in a popular email client. This vulnerability was discovered eighteen months ago — and it has still not been patched by the manufacturer. User data is being collected across forty-three countries. Passwords are being changed remotely the moment they are captured, locking victims out of their own accounts. It is believed that the operation is being coordinated from servers in three different jurisdictions, specifically chosen to make prosecution almost impossible.
What comes next
Anna will be presenting her findings to law enforcement at a closed briefing next week. By then, she will have been operating undercover for thirty days. The investigation is ongoing — and, it should be noted, increasingly dangerous. New legislation is currently being drafted in three EU member states that would force internet service providers to take responsibility for phishing hosted on their networks. Whether it will be passed remains uncertain. But something is finally being done.
After reading: Find and label six passive constructions. Identify the tense or type of each (Progressive / Perfect / Future / Modal / Impersonal).
Task 1 — Answer the Questions

Write full sentences.

1.What is Anna currently doing undercover?
Answer: ___________________________________________________________________
2.How are users being directed to the fake banking websites?
Answer: ___________________________________________________________________
3.Why is the vulnerability still being exploited eighteen months after it was discovered?
Answer: ___________________________________________________________________
4.What will Anna be doing next week?
Answer: ___________________________________________________________________
5.What is currently happening in three EU member states?
Answer: ___________________________________________________________________
Task 2 — True / False / Not Given

Write T, F or NG.

1.The phishing network is currently running fake versions of seventeen banking websites.[ T / F / NG ]
2.Most victims discover the breach within thirty days of the attack.[ T / F / NG ]
3.The servers are deliberately located in different jurisdictions to complicate prosecution.[ T / F / NG ]
4.Anna has worked undercover on three previous investigations before this one.[ T / F / NG ]
5.New legislation being drafted in three EU countries would make ISPs responsible for hosted phishing.[ T / F / NG ]

Handout 4

Listening

Listening
Anna has recorded a call with Dr. Chen, a cybersecurity expert. Listen carefully. Your teacher will read it twice.
Task 1 — Choose the Correct Answer

Circle A, B or C.

1.   How does Dr. Chen describe the current scale of phishing?
A.   A small number of highly targeted attacks on corporate networks
B.   Thousands of campaigns being run simultaneously; credentials harvested on an industrial scale
C.   Mostly automated attacks that are easily blocked by standard security software
2.   What happens to fake websites when they are taken down by authorities?
A.   The criminals lose all the data they have collected
B.   The criminals immediately rebuild the site on a different server
C.   The data has already been extracted and sold — the damage is done
3.   What will Dr. Chen be doing at the Brussels conference?
A.   Presenting on the regulation of internet service providers and their responsibility for facilitating fraud
B.   Launching a new cybersecurity tool for consumers
C.   Meeting with European law enforcement to coordinate a joint investigation
Task 2 — Complete the Notes

Write ONE, TWO or THREE words for each gap.

Expert Interview Notes — Dr. Chen

1.
Right now: thousands of campaigns __________________ / __________________ on industrial scale
2.
Fake sites: hosted on __________________ / constantly __________________
3.
When you click: keystrokes __________________ / credentials __________________
4.
Brussels: Dr. Chen __________________ / topic: __________________ of ISPs
5.
New legislation: __________________ in __________________ European countries
Task 3 — Grammar in the Listening

Find one example of each. Write the exact words.

1.Present Progressive (active): ___________________________________________
2.Present Progressive (passive): ___________________________________________
3.Future Progressive: ___________________________________________
4.Passive (modal): ___________________________________________
5.Impersonal passive (It is…): ___________________________________________

Handout 5

Speaking

Speaking
Task A — Role-Play: The Expert Interview

Work in pairs. One is Anna (journalist), one is Dr. Chen (cybersecurity expert). Use all three grammar structures. Then swap.

Card A — Anna (Journalist)

  • "What is currently happening with phishing attacks?" [Pres Prog]
  • "What are criminals doing right now to…?" [Pres Prog]
  • "Will you be attending / presenting at…?" [Fut Prog]
  • "What will be happening to a victim's data if…?" [Fut Prog]
  • "Can data be intercepted? Should passwords be changed?" [Passive modal]
  • "It is reported that… — is this true?" [Impersonal passive]

Card B — Dr. Chen (Expert)

  • "Thousands of accounts are being targeted right now." [Pres Prog passive]
  • "Phishing is growing faster than any other crime." [Pres Prog]
  • "I will be presenting at the conference." [Fut Prog]
  • "Your data will be sold within minutes." [Future passive]
  • "It is estimated that 3 billion emails are sent daily." [Impersonal passive]
  • "New laws are currently being drafted." [Pres Prog passive]

Then swap.

Task B — Panel Discussion

Groups of four — each person takes one role. Debate the question: "Who is responsible for stopping online fraud — governments, companies, or individuals?"

Roles: Government representative · Technology company spokesperson · Cybersecurity expert · Victim advocate

Language to use:
"Right now, companies are not doing enough to…" / "Legislation is currently being drafted…" / "It is estimated that victims are losing… / Passwords should be changed… / Data must be encrypted… / At this time next year, regulations will be…"
Task C — Discussion

Talk in groups of three.

1.It is estimated that 3.4 billion phishing emails are being sent every day. Have you ever received one? What was it asking for? How are these emails becoming more convincing? Use Present Progressive to describe what criminals are currently doing.
2.Anna will be operating undercover for thirty days. What risks is she facing? What information will be gathered? What will be happening when her cover is eventually blown? Use Future Progressive throughout.
3.It is believed that most people's data has already been compromised in some way. What should be done? What can be changed? Use advanced passive forms — modal, impersonal and progressive — in your answer.

Handout 6

Writing

Writing
Task — Situation Report or Cybersecurity Advisory
Choose one:
Option A — Undercover Situation Report: Write Anna's situation report to her editor — what is currently happening in her investigation, what will be happening next, and what has been discovered.

Option B — Cybersecurity Advisory: Write a short advisory for the general public — what is currently being done by criminals, what should be done by users, and what will be happening if systems are not secured.

Word count: 100–120 words
Your text must include all three structures (underline each one):
Present Progressive — active + passive progressive
Future Progressive — at least one
Passive — at least THREE forms (modal / impersonal / perfect / future)
Plus at least FIVE vocabulary words from Handout 1
Useful phrases:
"It is estimated / believed that… / Data is currently being… / Accounts are being targeted… / Passwords should be changed… / At this time tomorrow, [action] will be happening… / It has been discovered that…"
Self-check:  [ ] 100–120 words  [ ] Pres Prog (active)  [ ] Pres Prog (passive)  [ ] Fut Prog  [ ] 3× Passive forms  [ ] 5 vocab  [ ] all underlined