Young people are facing an ever-increasing array of online dangers. One of the most common is receipt of a phishing email. This paper presents new evidence on the characteristics of young people most likely to respond to such emails. I find approximately one-in-seven 15-year-olds are at risk of responding to a phishing email, rising to one-in-five amongst those from disadvantaged socio-economic backgrounds. Such risks are particularly high amongst young people with low levels of cognitive skill. Unfortunately, students who are taught about the dangers posed by phishing emails at school are just as likely to take inappropriate actions following their receipt as their peers who have not. I thus conclude that greater emphasis and higher quality instruction needs to be provided to young people about the online risks they face, particularly to those from disadvantaged socio-economic backgrounds and low academic achievers.