<![CDATA[High school students are active users of digital services, yet their ability to recognize phishing and social engineering attacks has not kept pace with that use. The partner school, SMA Sejahtera 1 Depok, did not yet have a structured, practice-based cybersecurity education program. This community service activity aimed to improve students' cybersecurity literacy and their ability to recognize and resist phishing and social engineering attacks. It was carried out as a one-day intensive workshop on 25 September 2026 for about 50 grade X students. The methods combined interactive lectures, case demonstrations, controlled simulations, role-play, and group discussions across four pillars: cybersecurity concepts, the anatomy of phishing, social engineering patterns, and account security practices. The case demonstration used a fake free food-and-drink e-voucher claim email impersonating a look-alike brand of a well-known coffee shop near the school. Evaluation used a pre-test and post-test, simulation worksheets, a phishing email simulation, and a satisfaction questionnaire. Of the 35 phishing emails delivered, 17 students (48.6%) opened the fake link and entered data into the imitation form without verification. The mean score rose from 90.67 on the pre-test (30 students) to 97.92 on the post-test (24 students), and correct identification of a safe address rose from 46.7% to 100%. These findings show that students remain vulnerable to familiar instant offers even when their knowledge is high, underlining the importance of experience-based education. All simulations were controlled, and the data entered by students were used only to count responses and were not published.]]>
