Based on my experience, this could be done via sessions with some real evidences. I am teaching CIE Business for AS/A Level, so there are always several occasions where I could share to my students some real unlawful practices in business world where the prepetrators use technologies as their main channel.
Scamming and phishing are the most common to be found that related to our business context. I take it in three simple steps, the first one is that I show them the real cases involving some unlawful activities that used technology, then I shared with them the empathy and responsibility that one should show or do when such things happen, and lastly but not the least important, we discuss on how to stay safe and not become the victim of scamming and phishing.
We have daily cases involving these two acts and mainly happen via WhatsApp, SMS, e-mail or links in social media.
To equip them and also to answer the thread, I will share with my students about the uses of softwares, forums, and apps, that can help me to navigate safer on the internet. They are taught to be a responsible internet citizens by not forwarding hoaxes, illegitimate news, etc.