互动式反诈骗训练游戏,模拟真实诈骗场景让你识别,带等级、认证和无尽模式
# Cyberscam生存模拟器 认证与进阶扩展 作者:Scott M 版本:1.3.1 – 视觉增强消费者优化版 最后修改时间:2026-02-13 ## v1.3.1 版本目的 在 v1.3.0 独立消费者娱乐性基础上进一步优化:低压力乐趣、鼓励建立积极的日常习惯、可重复游玩且无压力。 添加安全的教育性视觉元素(来自权威来源的真实网络诈骗示例截图),以增强真实感、模式识别能力和参与度——尤其适用于混合现实、多轮次和无尽模式场景。 继续保持对个人成长、轻度温暖/幽默感(可切换)、家庭/访客模式以及掌握后开启无尽模式的重视。 严格避免企业级功能(无风险评分、排行榜、强制配额、合规性追踪)。 ## 核心规则 – 保留并强化 ### 持久化与进度追踪 - 所有进度按用户账户保存,跨会话/设备持续有效。 - 未完成的场景不计入统计。 - 可选本地访客模式(无保存功能,适用于快速家庭/朋友会话;认证/资格标记为临时状态,直至绑定账户)。 ### 场景计数规则 - 场景在每个等级的要求集合内必须唯一,除非标记为“可重复练习”(每级所需场景数中最多占20%)。 - 单个场景若符合多个等级的标准,可同时计入多个等级。 - 内部设有“已用于等级X”标志,防止在同一等级内重复计算。 - 任一级别的场景中,至少70%应来自不同模板/题库(防止挑题)。 ### 视觉元素整合(v1.3.1 新增) - 展示来自权威来源的安全、匿名化教育截图(电子邮件、短信、网站等),如大学IT/安全页面、FTC、CISA、IRS 诈骗报告等。 - 图像必须满足以下条件: - 公开用于警示/教育目的 - 经过脱敏处理(模糊个人身份信息,使用虚假/无效域名) - 不可点击(仅静态展示) - 明确标注为安全培训示例 - 使用指南: - 第2至第5级及无尽模式中,50–80%的场景包含视觉元素 - 第1级:可选 / 轻量使用(聚焦基础意识) - 更高级别:混合现实和多轮次场景中强制使用 - 无尽模式:随机抽取视觉素材以增加多样性 - UI 展示:高对比度、可缩放弹出卡片或内嵌图像;“检查”热点可揭示危险信号提示(例如URL不匹配、紧迫性语言)。 - 可访问性:提供替代文本(alt text)、支持语音朗读的描述;可切换至纯文本模式。 - 离线备用:缓存少量静态示例图像。 - 不动态获取实时恶意内容;不含追踪像素。 ### 关键术语定义(术语表)– 保持不变 - 灾难性失败:分享凭据、下载/点击恶意载荷、转账、授予远程访问权限。 - 仅凭品牌盲目信任:仅依据标志/域名/发件人名称行事,未进行二次验证。 - 通过已知渠道验证:使用第二个预先可信的方法(拨打已知号码、通过独立应用/网站登录、通过不同渠道向同事确认)。 - 明确抵制升级:在压力下选择降级、质疑或退出选项。 - 沉没成本行为:因前期投入而在出现警示信号后仍继续。 - 混合现实场景:同时包含合法与欺诈性消息(玩家需加以区分)。 - 提示(验证回避):在可疑操作或不作为后出现的游戏内提示/弹窗(例如,“这看起来很紧急——要不再确认一下?”)。 ### 不合格重置与宽恕机制 – 保持不变 - 获得当前等级认证后,不合格记录将重置。 - 第5级过度回避行为在成功处理2次合法消息后重置。 - 每级一次“学习宽限”:首次触发不合格仅触发温和反思(不阻断进度)。 ### 防作弊与防过度警惕保护机制 – 保持不变 - 最低唯一场景要求(70%多样性)。 - 过度谨慎路径:连续≥3次拦截/举报合法消息将解锁“平衡再进入”迷你场景(低风险合法互动);成功完成2次可使过度回避计数减半。 - 若未完成可用场景池中至少50%的内容,则无法获得认证。 ## 认证等级 – 新增视觉整合说明 ### 🟢 第1级:数字街头智慧(意识与暂停) - 完成 ≥4 个不同场景。 - ≥3 个场景中:在点击/回复/转发前至少有一次暂停/检查行为。 - 在 ≥3/4 的场景中避免灾难性失败。 - 无不合格项(起始阶段宽容)。 - 视觉元素:可选 / 入门级(简单邮件/短信示例)。 ### 🔵 第2级:准备验证(不因犹豫而停滞) - 在完成第1级后,完成 ≥5 个不同场景。 - ≥3 个场景中:进行独立验证(通过已知渠道/独立查询)。 - 仅凭品牌盲目信任的情况 ≤1 次。 - 不合格项:忽略验证提示 ≥3 次(解锁后重置)。 - 视觉元素:大多数场景强制使用;聚焦品牌与链接(例如假冒 PayPal/Amazon)。 ### 🟣 第3级:社会工程意识(情绪智能) - 完成 ≥5 个涉及情绪触发的不同场景(紧迫感/恐惧/权威/贪婪/同情)。 - ≥3 个场景中:延迟响应且避免过度分享信息。 - 至少1次明确抵制升级行为。 - 一票否决项:在未验证的情况下,情绪化互动升级 ≥3 次(可重置)。 - 视觉要求:必须包含;展示引发紧迫感/恐惧感的触发元素(例如,“账户已被锁定”、“需支付包裹费用”)。 ### 🟠 等级 4:长期博弈抵抗者(模式识别) - 完成 ≥2 个不同的多轮交互场景(每场景 ≥3 轮)。 - 至少 1 次:识别出话术偏移 OR 在高风险前安全退出。 - 至少 1 次:避免沉没成本延续行为。 - 一票否决项:在明显出现话术偏移后仍继续 ≥2 次。 - 视觉要求:强制要求;需以消息线程形式展示逐步升级的过程。 ### 🔴 等级 5:平衡怀疑者(判断力,而非恐惧驱动) - 完成 ≥5 个不同的混合现实场景。 - 正确处理 ≥2 个真实情况(做出恰当回应)+ ≥2 个诈骗场景(暂停/验证/退出)。 - 过度回避计数器 <3。 - 一票否决项:持续过度回避 ≥3 次(可通过“平衡重返”机制缓解)。 - 视觉要求:强制要求;需并列或以线程形式展示真实与欺诈案例的混合内容。 ## 认证揭示时刻 – 保持不变 (简短、肯定性的语句,2–3 句;可选“ Chill Mode”一句式轻松提示) ## 掌握后阶段:无尽模式 – 增强视觉支持 - “诈骗冲浪”会话:每次 3–5 个带视觉元素的随机快速场景(不再授予新认证)。 - 连胜 streak 与装饰性徽章保持不变。 - 私人“诈骗日志”保持不变。 ## 幽默与温情层(可选切换:“Chill Mode”)– 保持不变 (机智旁白、温和调侃、老爹级笑话风格) ## 现实生活中的“胜利”时刻 – 保持不变 ## 家庭 / 共同游玩氛围 – 保持不变 ## 极简视觉与音频优化 – 扩展内容 - 音频:暂停时播放舒缓的 lo-fi 音乐;做出明智选择时触发轻快的“aha!”音效(可切换)。 - UI:友好的卡通诈骗反派吉祥物(滑稽,不吓人);绿色对勾标记。 - 新增:教育性截图展示功能(高对比度、可缩放、可检查热点区域)。 - 可访问性:支持高对比度、更大字体、适配语音朗读、提供纯文本备用切换开关。 ## 避免企业陷阱 – 保持不变 ## 进度可见性规则 – 保持不变 ## 会话结束总结 – 保持不变 ## 可访问性与本地化说明 – 保持不变 ## 附录:视觉提示示例(实施参考) 这些示例来自公开资源(FTC、大学 IT 页面、防诈宣传网站),安全且具教育意义。请使用静态、已打码的图片,并设置“检查”热点以揭示危险信号。可搭配 Chill Mode 的旁白增添温情。 ### 等级 1 示例 - 伪造的 Netflix 钓鱼邮件:“账户暂停 – 请更新付款信息”,发件人域名不匹配(例如 netf1ix-support.com)。热点提示:“发件人与 netflix.com 不符!” - 通用安全警报邮件:纯文本内容声称“验证登录”,来自伪造域名。 ### 等级 2 示例 - 伪造 PayPal 邮件:模仿其布局/标志,但链接悬停显示非 PayPal 域名(例如 paypal-secure-random.com)。热点提示:“品牌看起来很真,但域名不对——请单独验证!” - 伪造银行提醒:显示“可疑活动 – 点击验证”,页脚链接域名不匹配。 ### 等级 3 示例 - 紧急包裹 smishing 短信:“您的包裹被扣留 – 立即支付费用”,附短链接(例如 tinyurl 变体)。热点提示:“紧迫感 + 未经请求的费用 = 典型施压手段!” - 伪造权威/贪婪触发:如“IRS 退税”或“您中奖了!”诱导快速行动。 ### 等级 4 示例 - 逐步偏移的消息线程:3–4 条消息,起始看似正常(例如工作机会),逐步升级至“发送礼品卡”或高风险链接。后期回合热点提示:“检测到话术偏移——起初正常,现已高风险!” ### 等级 5 示例 - 并列真实 vs. 伪造:真实 Netflix 确认邮件与钓鱼克隆件并列(细微差异如域名含连字符或添加紧迫语句)。帮助练习平衡判断。 - 混合真实/伪造组合:正常的配送更新逐渐演变为付款请求。 ### 无尽模式 - 从上述示例中随机抽取(例如 IRS 短信、Amazon 钓鱼、银行警报),实现快速多样化。 所有视觉素材需轻微标注来源(例如,“灵感来自 FTC 消费者建议示例”),并明确标注为仅用于安全模拟。 ## 更新日志 - v1.3.1:新增安全教育视觉整合(来自权威来源的截图)、按等级划分的视觉使用指南、图像 UI 优化、离线备用方案、纯文本切换开关,以及包含视觉提示示例的附录。 - v1.3.0:新增无尽模式、Chill Mode 幽默元素、现实生活胜利时刻、访客/家庭共玩功能、音视频优化;强化消费者边界。 - v1.2.1:持久性机制、唯一性/重叠规则、术语表、容错机制、反作弊设计、“平衡重返”机制。 - v1.2.0:初始认证系统。 - v1.1.0 / v1.0.0:核心循环基础。
# Cyberscam Survival Simulator Certification & Progression Extension Author: Scott M Version: 1.3.1 – Visual-Enhanced Consumer Polish Last Modified: 2026-02-13 ## Purpose of v1.3.1 Build on v1.3.0 standalone consumer enjoyment: low-stress fun, hopeful daily habit-building, replayable without pressure. Add safe, educational visual elements (real-world scam example screenshots from reputable sources) to increase realism, pattern recognition, and engagement — especially for mixed-reality, multi-turn, and Endless Mode scenarios. Maintain emphasis on personal growth, light warmth/humor (toggleable), family/guest modes, and endless mode after mastery. Strictly avoid enterprise features (no risk scores, leaderboards, mandatory quotas, compliance tracking). ## Core Rules – Retained & Reinforced ### Persistence & Tracking - All progress saved per user account, persists across sessions/devices. - Incomplete scenarios do not count. - Optional local-only Guest Mode (no save, quick family/friend sessions; provisional/certifications marked until account-linked). ### Scenario Counting Rules - Scenarios must be unique within a level’s requirement set unless tagged “Replayable for Practice” (max 20% of required count per level). - Single scenario may count toward multiple levels if it meets criteria for each. - Internal “used for level X” flag prevents double-dipping within same level. - At least 70% of scenarios for any level from different templates/pools (anti-cherry-picking). ### Visual Element Integration (New in v1.3.1) - Display safe, anonymized educational screenshots (emails, texts, websites) from reputable sources (university IT/security pages, FTC, CISA, IRS scam reports, etc.). - Images must be: - Publicly shared for awareness/education purposes - Redacted (blurred personal info, fake/inactive domains) - Non-clickable (static display only) - Framed as safe training examples - Usage guidelines: - 50–80% of scenarios in Levels 2–5 and Endless Mode include a visual - Level 1: optional / lighter usage (focus on basic awareness) - Higher levels: mandatory for mixed-reality and multi-turn scenarios - Endless Mode: randomized visual pulls for variety - UI presentation: high-contrast, zoomable pop-up cards or inline images; “Inspect” hotspots reveal red-flag hints (e.g., mismatched URL, urgency language). - Accessibility: alt text, voice-over friendly descriptions; toggle to text-only mode. - Offline fallback: small cached set of static example images. - No dynamic fetching of live malicious content; no tracking pixels. ### Key Term Definitions (Glossary) – Unchanged - Catastrophic failure: Shares credentials, downloads/clicks malicious payload, sends money, grants remote access. - Blindly trust branding alone: Proceeds based only on logo/domain/sender name without secondary check. - Verification via known channel: Uses second pre-trusted method (call known number, separate app/site login, different-channel colleague check). - Explicitly resists escalation: Chooses de-escalate/question/exit option under pressure. - Sunk-cost behavior: Continues after red flags due to prior investment. - Mixed-reality scenarios: Include both legitimate and fraudulent messages (player distinguishes). - Prompt (verification avoidance): In-game hint/pop-up (e.g., “This looks urgent—want to double-check?”) after suspicious action/inaction. ### Disqualifier Reset & Forgiveness – Unchanged - Disqualifiers reset after earning current level. - Level 5 over-avoidance resets after 2 successful legitimate-message handles. - One “learning grace” per level: first disqualifier triggers gentle reflection (not block). ### Anti-Gaming & Anti-Paranoia Safeguards – Unchanged - Minimal unique scenario requirement (70% diversity). - Over-cautious path: ≥3 legit blocks/reports unlocks “Balanced Re-entry” mini-scenarios (low-stakes legit interactions); 2 successes halve over-avoidance counter. - No certification if <50% of available scenario pool completed. ## Certification Levels – Visual Integration Notes Added ### 🟢 Level 1: Digital Street Smart (Awareness & Pausing) - Complete ≥4 unique scenarios. - ≥3 scenarios: ≥1 pause/inspection before click/reply/forward. - Avoid catastrophic failure in ≥3/4. - No disqualifiers (forgiving start). - Visuals: Optional / introductory (simple email/text examples). ### 🔵 Level 2: Verification Ready (Checking Without Freezing) - Complete ≥5 unique scenarios after Level 1. - ≥3 scenarios: independent verification (known channel/separate lookup). - Blindly trusts branding alone in ≤1 scenario. - Disqualifier: 3+ ignored verification prompts (resets on unlock). - Visuals: Required for most; focus on branding/links (e.g., fake PayPal/Amazon). ### 🟣 Level 3: Social Engineering Aware (Emotional Intelligence) - Complete ≥5 unique emotional-trigger scenarios (urgency/fear/authority/greed/pity). - ≥3 scenarios: delays response AND avoids oversharing. - Explicitly resists escalation ≥1 time. - Disqualifier: Escalates emotional interaction w/o verification ≥3 times (resets). - Visuals: Required; show urgency/fear triggers (e.g., “account locked”, “package fee”). ### 🟠 Level 4: Long-Game Resistant (Pattern Recognition) - Complete ≥2 unique multi-interaction scenarios (≥3 turns). - ≥1: identifies drift OR safely exits before high-risk. - Avoids sunk-cost continuation ≥1 time. - Disqualifier: Continues after clear drift ≥2 times. - Visuals: Mandatory; threaded messages showing gradual escalation. ### 🔴 Level 5: Balanced Skeptic (Judgment, Not Fear) - Complete ≥5 unique mixed-reality scenarios. - Correctly handles ≥2 legitimate (appropriate response) + ≥2 scams (pause/verify/exit). - Over-avoidance counter <3. - Disqualifier: Persistent over-avoidance ≥3 (mitigated by Balanced Re-entry). - Visuals: Mandatory; mix of legit and fraudulent examples side-by-side or threaded. ## Certification Reveal Moments – Unchanged (Short, affirming, 2–3 sentences; optional Chill Mode one-liner) ## Post-Mastery: Endless Mode – Enhanced with Visuals - “Scam Surf” sessions: 3–5 randomized quick scenarios with visuals (no new certs). - Streaks & Cosmetic Badges unchanged. - Private “Scam Journal” unchanged. ## Humor & Warmth Layer (Optional Toggle: Chill Mode) – Unchanged (Witty narration, gentle roasts, dad-joke level) ## Real-Life "Win" Moments – Unchanged ## Family / Shared Play Vibes – Unchanged ## Minimal Visual / Audio Polish – Expanded - Audio: Calm lo-fi during pauses; upbeat “aha!” sting on smart choices (toggleable). - UI: Friendly cartoon scam-villain mascots (goofy, not scary); green checkmarks. - New: Educational screenshot display (high-contrast, zoomable, inspect hotspots). - Accessibility: High-contrast, larger text, voice-over friendly, text-only fallback toggle. ## Avoid Enterprise Traps – Unchanged ## Progress Visibility Rules – Unchanged ## End-of-Session Summary – Unchanged ## Accessibility & Localization Notes – Unchanged ## Appendix: Sample Visual Cue Examples (Implementation Reference) These are safe, educational examples drawn from public sources (FTC, university IT pages, awareness sites). Use as static, redacted images with "Inspect" hotspots revealing red flags. Pair with Chill Mode narration for warmth. ### Level 1 Examples - Fake Netflix phishing email: Urgent "Account on hold – update payment" with mismatched sender domain (e.g., netf1ix-support.com). Hotspot: "Sender doesn't match netflix.com!" - Generic security alert email: Plain text claiming "Verify login" from spoofed domain. ### Level 2 Examples - Fake PayPal email: Mimics layout/logo but link hovers to non-PayPal domain (e.g., paypal-secure-random.com). Hotspot: "Branding looks good, but domain is off—verify separately!" - Spoofed bank alert: "Suspicious activity – click to verify" with mismatched footer links. ### Level 3 Examples - Urgent package smishing text: "Your package is held – pay fee now" with short link (e.g., tinyurl variant). Hotspot: "Urgency + unsolicited fee = classic pressure tactic!" - Fake authority/greed trigger: "IRS refund" or "You've won a prize!" pushing quick action. ### Level 4 Examples - Threaded drift: 3–4 messages starting legit (e.g., job offer), escalating to "Send gift cards" or risky links. Hotspot on later turns: "Drift detected—started normal, now high-risk!" ### Level 5 Examples - Side-by-side legit vs. fake: Real Netflix confirmation next to phishing clone (subtle domain hyphen or urgency added). Helps practice balanced judgment. - Mixed legit/fake combo: Normal delivery update drifting into payment request. ### Endless Mode - Randomized pulls from above (e.g., IRS text, Amazon phish, bank alert) for quick variety. All visuals credited lightly (e.g., "Inspired by FTC consumer advice examples") and framed as safe simulations only. ## Changelog - v1.3.1: Added safe educational visual integration (screenshots from reputable sources), visual usage guidelines by level, UI polish for images, offline fallback, text-only toggle, plus appendix with sample visual cue examples. - v1.3.0: Added Endless Mode, Chill Mode humor, real-life wins, Guest/family play, audio/visual polish; reinforced consumer boundaries. - v1.2.1: Persistence, unique/overlaps, glossary, forgiveness, anti-gaming, Balanced Re-entry. - v1.2.0: Initial certification system. - v1.1.0 / v1.0.0: Core loop foundations.