Beware of online fraud

Did you know that identity theft is one of the fastest growing crimes in Canada? Protecting your personal information is our top priority and why we developed a new protection solution for all our members. Find out more about our personal data and identity theft protection measures.

Do you believe that you're safe from online fraud because the scams are too obvious? Don't be so sure! Think twice and stay aware: cyber-criminals are constantly refining their methods.

Never click on a link that you're not sure of, and never give personal information by email. A little well-placed doubt will save you a world of trouble. Here are some situations where your personal intuitive suspicion should set off alarm bells.

Fraudulent email and phishing

To tell whether an email is authentic or fraudulent, look carefully at the contents of the message. A fraudulent email will urge you to act quickly under the pretext that:

  • you are a finalist or winner of a contest
  • your account may have been subject to unauthorized access (e.g., a time and IP address may even be provided)
  • you must update your personal information or your account will be frozen or deleted
  • your account was used for fraud and you will be held accountable
  • you must sign up for an online security feature
  • a simple accounting error has been made and corrected (in this case, you are not asked to do anything except click on a link to a phony website)
  • etc.

These email messages will include a hyperlink which appears to be authentic, but leads to a phony version of your financial institution's website (for example). From this fake website, pirates can copy the personal information of their victims and use it to steal their money.

Be aware that financial institutions will never communicate with you via email for any of the above reasons. If you receive an email like this, do not reply to the email, do not click on any included links, and do not open any attached documents.

Hint: Do not access your financial institution's website via a search engine (Google, Yahoo, Bing, etc.). Always type the address (, for example), then click on the online transaction link. Make sure that this secure address begins with https://.

Don't forget: If you have replied or believe you have replied to a fraudulent email message, change your passwords immediately on all of the websites where you perform transactions.

More scamming tools

Scammers use 4 kinds of “bugs” to accomplish their goals.

  • A virus is a small program designed to self-replicate on other computers, like a biological virus that spreads from one person to another. It may hinder the proper operation of the infected computer.
  • A worm uses a computer's resources to replicate and spread to other computers over the Internet.
  • A Trojan horse a seemingly legitimate program that executes harmful actions without a user's authorization.
  • Spyware gathers personal information about a user without authorization and sends it to a third party.

Warning: If your computer is infected, do not use it to make online transactions or purchases until the virus has been removed by a qualified expert.

Protect yourself

Protect your personal information by creating a password that is hard to guess but easy to remember. Avoid using passwords like your date of birth or passwords that are easy to type (123abc).

Don't use the same password for all of your sites.

Install a security program that includes automatic updates and antivirus, antispyware, and antispam software, as well as a firewall. An antivirus filters and protects computer operations. A firewall prevents scammers from taking remote control of your computer.

Protect your computer from new viruses and intrusion techniques through frequent updates of your operating system (Windows, MacOS, or Linux) and your web browser.

Avoid using public computers for making your transactions. If you must do so, remember to erase your information afterwards (clear the cache memory and close the browser).

Tools and tips

Test the security of your online behaviour

Test your knowledge and your web security behaviour by taking the quiz.

Take the quiz - Test your web security knowledge and behaviour