Scammer Defence

@Olufemiloye The employment-scam pattern is the cleanest tell for new arrivals: a real cheque deposits, you send funds back to the recruiter, the deposit bounces a week later and the bank holds you liable. Real employers do not ask new hires to handle money. The transfer is the scam.

Popular scams in Canada that you should know as a new immigrant -Employment scam (asking you to deposit a cheque in your account) - CRA or Service Canada Phone calls (asking for SIN) -Messages/Emails asking you to click a link from your bank - Rental scam Which one did we miss?

@andrewinereview @Rogers @rcmpgrcpolice STIR/SHAKEN does not catch these because the calls come in over offshore VoIP that bypasses Canadian carrier attestation. A DNS blocker on the home router catches the follow-up step: when the caller texts a link to a fake Service Canada page, the page refuses to load.

@Rogers @rcmpgrcpolice three scam calls every hour from "Service Canada" saying that my "Sin has been suspended" ... seriously is there nothing that can be done about this???

@ServiceCanada_E Worth adding: the same playbook now arrives by text, with a lookalike Service Canada page asking for SIN plus banking. A DNS-level blocker on the home router refuses the page across every device on the network, so the form does not load even if a relative taps the link.

🚨 If you receive a call claiming that your Social Insurance Number (SIN) has been suspended due to criminal activity, hang up. It’s a scam! 🚨 Learn how to recognize a scam claiming to be from Service Canada ⬇️ canada.ca/en/employment-…

Most Canadian scam losses route through a small set of lookalike pages: CRA refund, Service Canada SIN, bank login clones, Canada Post redelivery. A DNS blocker refuses the page before it loads. When a text says tap here, what happens on a parent's phone? Two minutes, free.

@GetCyberSafe The single highest-yield move for households is a DNS-level blocker on the home router. It covers every device on the network with no per-device app to install, and it cuts off the lookalike pages that nearly every credential-theft and remote-support scam funnels through.

No organization is too small to be a victim of a cyber attack, which is why knowing how to prepare is critical. If you aren't sure where to start, consider implementing these five steps to help your employees #GetCyberSafe! Here's what you should know: getcybersafe.gc.ca/en/blogs/five-…

@canantifraud Senior-targeted CRA-impersonation has shifted to text. A link goes to a lookalike CRA page that captures SIN plus banking. A free DNS blocker on the home router stops the page from loading on every device, so even the relative who clicks first does not reach the form.

The Canadian Anti-Fraud Centre (CAFC) is raising awareness of an extortion fraud involving individuals impersonating law enforcement officials from China and Hong Kong. The fraud has been reported internationally and primarily targets members of the Asian community, including students and individuals with ties to mainland China or Hong Kong. In this scheme, victims are contacted by phone and falsely accused of being involved in criminal activity. Fraudsters claim to represent agencies such as the Public Safety Bureau (PSB) or other international public safety authorities. Victims are pressured to cooperate with a supposed “investigation” and may be instructed to travel or transfer funds under urgent and threatening circumstances. In some cases, victims are directed to convert money into gold or other high-value assets and surrender them to individuals posing as officers of the law such as anti-corruption officials. These tactics are designed to create fear, urgency and compliance. For more information: antifraudcentre-centreantifraude.ca/features-vedet… #kNOwfraud

@StatCan_eng A lot of the consumer harm starts with a single page that mimics a bank or lender login. The credential is gone in seconds. Filtering scam domains at the network layer on the phone stops most of those pages before the form ever appears, which keeps the password where it belongs.

🎊 Join us in celebrating the official start of the #2026Census across Canada! As soon as you receive your census invitation letter in the mail, complete your questionnaire online. It’s secure and completely confidential. census.gc.ca/en/index?utm_s…

@CdnBankers The fake-text-to-fake-login chain is the most common credential-grab pattern right now. The text looks real, the lookalike domain has a typo no one catches on a phone. A DNS filter on the device or router stops the page before it renders so a rushed tap never reaches the form.

Have a home office? Simple steps can go a long way towards keeping it secure. Learn about safety tips here: cba.ca/article/stayin… #FraudPrevention #CyberSecurity

Scammer Defence sets up once on a phone or home router. The blocklist updates on its own. It targets the Canadian scam page set: CRA lookalikes, Service Canada SIN pages, big-six bank login clones. No account, no per-device app, free for Canadian households.

@GetCyberSafe Pairing strong passwords with MFA is the big lift, but the lookalike login page is the other half. A DNS filter on the phone stops the page before the credentials get typed, so even a tired person on a Sunday morning does not lose them to a convincing CRA or bank URL.

If you aren't up for clearing out your entire attic this spring, SCRUB your devices to get rid of clutter instead! Unsubscribe from old email lists and delete old apps and emails – #GetCyberSafe now! youtube.com/watch?v=3sqYyN… 👇

@CompBureau A pattern with seniors right now is a call that pivots to a remote-support app. Once the screen is shared, the bank login is just a question of waiting. Two rules help: never install on the phone of a caller you did not initiate, and never read codes aloud.

📢 Don't miss this workshop! Join the conversation about AI’s impact on competition, privacy and copyright law, and telecommunications and broadcasting regulation.

@canantifraud The recent uptick is heavy on lookalike domains for the CRA, banks, and Canada Post. Most of the harm happens before the person reads the URL. A DNS blocker on the phone stops the page from loading at all, so a misread or rushed tap does not turn into a credential.

🚨 Fraud Alert: Calendar Phishing Fraudsters are sending emails that look like invoices or subscription notices from companies such as PayPal or Norton. These emails include or trigger a calendar invite, that are often automatically added to your device calendar. How it works: • The invite may appear legitimate and include a “Join meeting” or “View details” link. • Clicking the link may redirect you to a fake login page designed to steal your username and password. Protect yourself: • Don’t click links in unexpected emails or calendar invites • Verify the sender before responding • Never enter your credentials after clicking a suspicious link • Enable multi-factor authentication For more information on how to protect yourself from fraud: antifraudcentre.ca/index-eng.htm #kNOwfraud

My aunt in Halifax got a text last week. Canada Post said a parcel was held and asked for two dollars in fees. The link looked right. She checked the tracking number on the real Canada Post site first. There was no such parcel. A DNS blocker stops the page before the tap.

@CompBureau Bid rigging hits small Canadian municipalities the hardest. A short bid that looks like the lowest price often hides a pact among regulars. Procurement staff who rotate vendors and require sealed bids surface the pattern faster than a complaint after the fact.

We’re reminding businesses of their legal obligations when bidding on public contracts. Coordinating with your competitors on bids or prices to secure your business a win is illegal and a fraud on Canadian taxpayers. canada.ca/en/competition…

@CdnBankers The fraud angle on a home office is the same as the senior at the kitchen table. A lookalike invoice or shipping email loads a credential-capture page on the same Wi-Fi as the work laptop. A DNS blocker on the router stops the page before anyone in the household clicks.

@CdnBankers Strong unique passwords help, but the bigger fraud lever for most Canadians is the one-time code sent by text. No legitimate bank will ever ask for that code on a call. If a caller pressures for it, hang up and dial the number on the back of the card.

On World Password Day, a reminder: security is a shared responsibility. Banks work to protect against fraud, but strong, unique passwords & PINs are key to staying safe online. Don’t reuse passwords—if one account is breached, others can be at risk. cba.ca/article/are-yo…

Reported fraud in Canada hit 638 million dollars last year per the CAFC. Only about one in ten cases gets reported, so real losses are several times higher. Most starts with a text or call sending someone to a lookalike page. A DNS blocker stops the page before the tap matters.

@canantifraud Fraud Prevention Month coverage lands hardest when it reaches the whole family, not just the person who fell for it. A short kitchen-table conversation about what real CRA contact looks like, or how a bank verifies you, prevents the next call from working.

#kNOwfraud #showmetheFRAUD #BeScamSmart

@CdnBankers The tell on most fake job offers is the SIN ask, or an e-transfer for a starter kit or training fee. Legitimate Canadian employers do not need either before a signed contract. If the recruiter only uses WhatsApp or Telegram and rushes the onboarding, the offer is fraudulent.

Beware of employment scam messages offering fake jobs. Verify the company, check the job posting on official websites, and never accept funds on behalf of someone you don’t know. cba.ca/article/online… #scams

@CdnBankers This is why bank impersonation calls succeed. The caller invents urgency, asks for the one-time code from your banking app, then drains the account in seconds. Hang up and dial the number on the back of your card. A real bank will never need that code on the phone.

Your bank will never ask for your PIN, passwords, or one-time codes via text, email, or phone. Learn more here on how to stay safe and vigilant: cba.ca/article/what-y… #FraudPrevention #CyberSecurity