Scams in the primary classroom. I would start of simple. A good activity might include having students distinguish between real emails and fake or scame emails or messages. For example, I would show the student the following message.
Congratulations, due to the amazing comments you have left on our site and the contributions you have made to our online community we are giving you a free prize bundle consisting of $1000 and a select pack of toys of your choice. To claim your prize click on the following link.
Clearly, in this scenario the message is a scam. Once students recognise the difference between the fake and real message they could have turns at making their own fake message to give to their friend and in a role play situation students can act out what they would do if they received a scam email or message. Students could use the scenario above then to identify why it is a scam and explain why it is fake.
In regards to passwords. The following resource from the Goodwill Community Foundation would be a useful resource.