Skip to main content
Woman looking at her phone

Fraud awareness

Protect yourself from scams

At FirstOntario, your safety is our top priority. As scams and fraud tactics evolve, staying informed is the best defense. We’re here to provide practical tips and real-life examples to help you recognize potential scams before they happen.

Social engineering

Fraudsters often use social engineering to pressure or deceive people people into revealing personal information. Sharing details like passwords, financial data or system credentials can lead to a loss of funds, identity theft or data breaches.

Scammers will impersonate someone you know, an organization or even a government employee to access sensitive information and personal accounts. They can use information from the internet or social media to target individuals and businesses, pressuring with urgency to get you to click a link or send your account number and password. 

Here are some common examples

Phishing
An email asks you to provide sensitive information, complete an action or click on a malicious link.

Vishing
A phone call or voice message from a scammer, disguised as someone you know or a reputable company, persuading you to reveal personal information.

Smishing
A phishing attempt sent through a text message on your phone.

Have you heard about SIM swapping?

Fraudsters will impersonate you to access your mobile account and claim your phone has been lost or stolen. Your number will be linked to a new SIM and device the fraudster controls. Most victims don’t know it’s happened until they’ve tried to make a phone call or send a text message – and it doesn’t work.

The scammer will download popular applications and select the Forgot Password button. If an account is associated with your phone number or email address, the fraudster will receive a verification code. They will use it to confirm ownership, create their own password and takeover the account.

Lightbulb

Tips to stay safe!

  • If someone contacts you with an urgent request, say no, hang up, and verify their ask by contacting the company or individual directly using a known phone number or website.
  • Always verify the organization is legitimate before taking any action.
  • Never give out personal information via email or text, or with anyone you don’t know.
  • Don’t click on unfamiliar links or call suspicious numbers.
  • Install anti-virus software.

For more tips, visit the Canadian Anti-Fraud Centre.

In the know: recent scams to be aware of

Recovery scams are an advance-fee fraud where criminals target people who have already been victims of a previous scam. They claim they can help recover lost money if a fee is paid upfront.

Fraudsters prey on emotions, offering false hope while taking more money. They might pretend to be from law enforcement, government office, or legal firm working on the case. In reality, they are trying to exploit victims further.

Think before you trust – verify before you act! If you suspect fraud, report it immediately.

How to spot the scam

  • Unsolicited contact: Fraudsters often reach out via email, phone, or social media, claiming they can help recover lost funds.
  • Requests for upfront payment: They’ll ask you to pay a fee before they "release" your recovered money.
  • Too good to be true promises: They claim to recover your lost money, or even more than you lost. If it sounds too good to be true, it probably is.
  • Pressure tactics and urgency: Fraudsters push you to act quickly, saying you could miss out on getting your money back.
  • Impersonating authorities: Be wary if someone claims to be from law enforcement, consumer protection agencies, or banks and asks for money to help with recovery.

How to protect yourself

  • Stay skeptical: If someone reaches out claiming they can recover lost funds, verify their identity through official sources.
  • Never pay upfront fees: Legitimate agencies do not charge upfront to help recover lost money.
  • Guard your personal information: If you've been scammed before, fraudsters may already have some of your details. Don’t provide additional information that could be used against you.
  • Report and block scammers: If you suspect a recovery scam, report it to your financial institution, consumer protection agencies, or law enforcement.

Learn more about recovery scams ❐

Student loan financial aid scams involve fraudsters posing as debt relief companies that claim they can reduce or eliminate your student loan debt. They often target borrowers through email, text messages, or phone calls, offering quick solutions that seem too good to be true.

These fraudsters frequently use high-pressure tactics to push you into making hasty decisions, claiming limited time offers or invoking "new laws" that will end their services soon.

Think before you trust – verify before you act! If you suspect fraud, report it immediately.

How to spot the scam

  • Unsolicited offers: Be cautious if you receive unsolicited emails, texts, or calls from companies claiming to help with your student loans.
  • Urgency tactics: Fraudsters often create a false sense of urgency, claiming that new laws are in place or that government programs will soon end. If you are pressured to act immediately, this is a major red flag.
  • Unverifiable information: They might reference vague "new laws" or "exclusive" programs that seem too complex to verify. Always cross-check this information on official government websites.
  • Upfront fees: Legitimate student loan servicers will never ask for payment upfront to negotiate loan reductions or forgiveness.
  • Threats of arrest or legal action: Scammers might claim you will be arrested if you don’t act now. This is a classic scare tactic. Legitimate services will never threaten you. Always verify with your loan servicer before taking action.

How to protect yourself

  • Verify the legitimacy: Only communicate with your loan servicer directly via their official phone number or website. Government-affiliated services such National Student Loans Service Centre (NSLSC) can be trusted for guidance.
  • Do not give out personal info: Never share personal details like your Social Insurance Number (SIN), bank account, or credit card information unless you're sure the company is legitimate.
  • Hang up if you're unsure: If you get a call or message from an unfamiliar company claiming to offer loan relief, hang up. Call your loan servicer directly to confirm whether the offer is real.
  • Report suspicious activity: If you suspect you've been targeted, report the scam to the Canadian Anti-Fraud Centre or your student loan servicer.
  • Take action: Stay vigilant and always take the time to research before taking action.

Learn more about how to protect yourself ❐

AI Generated audio and video scams are becoming more sophisticated.

Scammers are using AI to clone voices, manipulate videos, and create fake identities, making their scams appear more legitimate and convincing. They may even fake voices or faces of people you trust to trick you into sending money or revealing personal information.

Detect. Defend. Defeat deepfake fraud.

Think before you trust – verify before you act! If you suspect fraud, report it immediately.

How to spot a deepfake scam

  • Sudden, urgent requests for money from friends, family, or colleagues.
  • Poor lip-syncing or unnatural facial movements in a video call.
  • Unexpected changes in voice tone or accent during a call.
  • A sense of urgency to act quickly without verifying details.

How to protect yourself

  • Always verify requests for money via a separate method (call the person directly).
  • Use a code word with family members for emergencies.
  • Be skeptical of video or voice messages that pressure you to act fast.
  • Keep personal information off social media to prevent scammers from gathering data.

How deepfakes are targeting small business

As AI technology evolves, so do scams targeting businesses. Deepfake scams use AI to mimic voices, emails, and even videos of trusted individuals—making it harder than ever to spot fraud.

Common deepfake scams

  • Fake emails or calls from "your boss" requesting urgent payments.
  • AI-generated voice messages pretending to be suppliers.
  • Fraudulent video calls appearing to be real people.

Learn more about deepfake scams targeting businesses ❐

How to protect your business

  • Always verify requests for payments or sensitive data through a second channel.
  • Educate your team on deepfake tactics.
  • Use multi-factor authentication to secure financial transactions.
  • Stay updated on fraud trends to stay ahead of scammers.

Card‑not‑present fraud is a type of credit card/debit card scam where the criminal uses your card numbers to make purchases online, by mail, or over the phone. In these cases, they do not have to present the physical card to make a purchase.

How do Fraudsters get your card information?

Criminals who commit Card‑not‑present fraud obtain credit/debit card information from unsecure websites, fake sites and through phishing techniques. Learn more about how Card‑not‑present fraud is committed.

How to protect yourself

  • Confirm you are using a secure payment method when shopping online.
  • Enable transaction alerts to monitor your account in real time.
  • Never save your card details on unfamiliar websites.
  • Be cautious of unsolicited phone calls requesting card details.

Spot the signs and take action

  • Emails or calls pretending to be from your bank requesting card details.
  • Stay one step ahead – monitor your transactions and report suspicious activity.
  • If you suspect fraud, report it immediately.

Fake e-Transfer text messages and emails are sent with a link to an illegal impersonated website. The site looks authentic and is not easily identifiable. The fake login page collects usernames and passwords in an attempt to gain access, take over accounts and steal funds.

Proceed with caution. If you are not expecting an e-Transfer, confirm with the sender or call your financial institution to be sure. Visit the actual login page to confirm the URL. You can also hover over links on a suspicious page. If they are all the exact same or don’t match the wording of the link, it’s a red flag the page is not legitimate. Always monitor account activity and consider registering for Autodeposit.

If you think you have been compromised, report it to the police and contact your financial institution. If you have any questions or concerns about anything suspicious, please connect with our Member Service Centre at 1-800-616-8878.

In the news

Do you think you may be a victim of fraud?

If you are concerned or suspect any kind of fraudulent activity, be sure to take the proper steps to ensure your safety and security.

Select Image

Please Note: FirstOntario Credit Union has provided this information as high level guidance only. If you require additional information regarding frauds and scams please visit the Canadian Anti Fraud Centre.