CYBER HYGIENE / PRACTICAL GUIDES
Recognize Scams
Scams can arrive through email, text messages, phone calls, or websites that look completely real. Learn what they look like, how to spot the warning signs, and what you can do to protect yourself.
Think you’ve encountered a scam?01 / LEARN THE BASICS
Common types of scams
Scammers use different tricks, but their goals are often the same: stealing money, personal information, or access to your accounts.
02 / SEE FOR YOURSELF
What scams actually look like
These are fictional examples based on common scam tactics. Choose a message, then reveal the warning signs to see what to look for.
Unusual sign-in activity
We noticed an unusual sign-in attempt to your Microsoft account.
Your OneDrive files may be locked today unless you verify your account.
If this wasn't you, please review your recent activity.
Review activityMicrosoft account security
Order #4827196321 requires address confirmation.
Please pay a $2.49 redelivery fee at fedex-rschedule.com.
Update by 5 PM today to avoid return.
Today · 2:16 PM
Your order could not be delivered because of a payment verification issue.
Update your payment method to avoid cancellation.
Order reference: 000-0000000-0000000 (example)Incoming call
♙Canada Revenue Agency
Caller ID is not proof of who is calling“This is an officer with the Canada Revenue Agency. Your tax file is under investigation.”
“If you do not pay today, police will come to arrest you.”
“To settle this immediately, send a $1,200 Interac e-Transfer to crapayment@payments.co. I will stay on the line until you send it.”
Can you spot what’s suspicious?
- Look at the sender’s full email address. This example uses an address that is not a Microsoft domain. A familiar name or logo is not proof it came from Microsoft.
- The warning that your files will be locked today is designed to make you panic. Be careful when a message pressures you to act immediately.
- The “Review activity” button is an unexpected sign-in link. Open Microsoft’s website or your Microsoft account app yourself instead.
03 / RECOGNIZE THE PATTERNS
Most scams use the same tricks
Knowing these patterns helps you recognize scams you haven’t seen before.
“You must act today!”
“Your account is at risk.”
“I’m calling from your bank.”
“You’ve won a prize!”
“Is this you in this photo?”
“Mom, I have a new number.”
A SIMPLE HABIT
Stop. Check. Verify.
Three small steps that can help you avoid many common scams.
Stop
Don’t let anyone rush you.
Check
Look for anything unusual.
Verify
Contact the person or company using a number or website you trust.
04 / TAKE ACTION
Think you’ve encountered a scam?
Select what happened to find out what you can do next.
Don’t click its links, open unexpected attachments, reply, or call numbers provided in the message. If you’re concerned, contact the organization through its official website or app.
In Canada, suspected fraud can be reported to the Canadian Anti-Fraud Centre.
05 / LEARN MORE
FAQ
How do scammers get my information?
Scammers can find your personal information in several ways. Your name, phone number, or address might be available online, shared on social media, or exposed when a company experiences a data breach.
Want to check if your email address has been involved in a data breach?
Visit Have I Been Pwned and enter your email address. This free website checks whether your email address has appeared in known data breaches, where personal information may have been exposed or stolen.
Keep in mind: If no breaches are found, it doesn't guarantee your information is safe. Not all data breaches are known or reported.
How can I stop receiving so many scam calls and text messages?
You might not be able to stop every scam call or text message, but a few steps can help reduce them.
Block suspicious numbers. Most phones let you block unwanted callers and report text messages as spam.
Turn on spam protection. Check your phone's settings for options to filter unwanted calls and messages.
Contact your phone provider. Ask whether they offer services to help block unwanted calls.
Register with Canada's National Do Not Call List. This can reduce calls from legitimate telemarketers, but it won't stop criminals who ignore the rules.
Remember: You don't have to answer every phone call, especially when you don't recognize the number.
Can scammers imitate someone's voice using AI?
Yes. Scammers are always looking for new ways to scam their victims. Today, they are using artificial intelligence (AI) to copy someone's voice, making it sound like a family member or someone you know.
For example, you might receive a call from someone who sounds like your child or grandchild, claiming they're in trouble and urgently need money.
What should you do? Hang up and call the person using a phone number you already know. You can also ask a question only they would know, but don't rely on that alone. Don't send money until you've confirmed the request is real.
Remember: Even if a caller sounds like someone you know, double-check before sending money.
Someone says they can recover money I lost to a scam. Can I trust them?
Be careful. Some scammers specifically target people who have already lost money to a scam.
They may pretend to work for the police, a bank, the government, or a company that helps people recover stolen money. They might promise to get your money back, but first ask you to pay a fee or tax. This is called a recovery scam.
Contact your bank immediately. Explain what happened and ask whether the payment can be stopped or recovered.
Report the scam to your local police and the Canadian Anti-Fraud Centre.
Remember: Be suspicious of anyone who contacts you unexpectedly, promises to recover your money, and asks you to pay first.
KEEP LEARNING
Build safer habits online
Explore more Cyber Hygiene guides to help protect yourself and your loved ones.