Quiz #1:

How to spot a phishing scam

Take the quiz!

Cyber security awareness brought to you by the Canadian Bankers Association — Helping you stay cyber safe —

Phishing scams can take a few different forms:

Phishing

Cyber criminals send emails and create websites that look like they’re from a legitimate company you might deal with, such as your financial institution.

Vishing

“Voice phishing” where criminals call you on the phone or leave voice messages to trick you into revealing personal information.

Smishing

With “SMS phishing” cyber criminals send texts to your mobile phone that look like they’re from a legitimate company to persuade you to click on the link in the text.

Stay in the know!

The CBA publishes a regular Fraud Prevention Tip email newsletter. Sign up to learn about the latest frauds and scams.

How much do you know?

Spelling and grammatical errors in a text or email are a great way to spot a scam.

While there are still phishing emails with spelling and grammatical errors, this easy way to spot fake emails is now less common. The increasing sophistication of phishing attacks means that more fraudulent emails look very similar to the real thing.

True

False

While there are still phishing emails with spelling and grammatical errors, this easy way to spot fake emails is now less common. The increasing sophistication of phishing attacks means that more fraudulent emails look very similar to the real thing.

Incorrect.

Correct.

Hovering over a link in an email is an effective way to confirm that the URL isn’t sending you to a scam site.

Phishing emails often include embedded links that look valid, but if you hover over them, you can usually see the real hyperlink. If the hyperlinked address isn’t the same as what appears in the email or looks suspicious in any way, it’s very likely a phishing attempt.

True

False

Phishing emails often include embedded links that look valid, but if you hover over them, you can usually see the real hyperlink. If the hyperlinked address isn’t the same as what appears in the email or looks suspicious in any way, it’s very likely a phishing attempt.

Incorrect.

Correct.

You receive a friendly call from your bank asking to verify your account information including the one-time login code that was just sent to you. You should comply so you don’t get locked out of your account.

Your bank will never ask you for the one-time passcode, your password, or your login credentials or to login to your account. Requests like these are always a scam.

True

False

Your bank will never ask you for the one-time passcode, your password, or your login credentials or to login to your account. Requests like these are always a scam.

Incorrect.

Correct.

Scammers are excited by natural disasters, health scares and large-scale service outages because they’re great opportunities to launch new versions of old scams.

Scammers read the news like everyone else. Phony donation campaigns, tricky texts with fake refunds and fake emails with health information have all emerged in the wake of current events. The scams attempt to trick you into revealing your personal information or clicking on malicious links or attachments. Remain skeptical.

True

False

Scammers read the news like everyone else. Phony donation campaigns, tricky texts with fake refunds and fake emails with health information have all emerged in the wake of current events. The scams attempt to trick you into revealing your personal information or clicking on malicious links or attachments. Remain skeptical.

Incorrect.

Correct.

Since mobile phones are so popular, banks often contact you by text to warn you when your account is in danger of being closed.

Warnings that your account will be closed, or your access limited, if you don’t reply is a common sign of a phishing scam. Your bank will also never send you a threatening email, or call you on the phone, demanding information like your password, credit or debit card number, or your mother’s maiden name.

True

False

Warnings that your account will be closed, or your access limited, if you don’t reply is a common sign of a phishing scam. Your bank will also never send you a threatening email, or call you on the phone, demanding information like your password, credit or debit card number, or your mother’s maiden name.

Incorrect.

Correct.

CBA Resources

1. How to spot a phishing scam

1. How to spot a phishing scam

https://cba.ca/how-to-spot-a-phishing-scam

2. How phishing has evolved and three new ways to respond

https://cba.ca/how-phishing-has-evolved

3. Demands for gift cards or prepaid cards? Don’t get scammed

https://cba.ca/gift-card-demands-scam

4. Beware of One Time Passcode scams with these tips

https://cba.ca/one-time-passcode-scams

What banks are doing to protect you from frauds and scams

Banks take extensive steps to protect your money and personal information and provide a wide range of fraud prevention information for customers. It is important to remember that fraudulent e-mails, voicemails and texts sent out by criminals may look and sound like they come from banks or retailers, but they are scams and should be reported to the company being spoofed and deleted.

To report a fraudulent email, be sure to send the email as an attachment.

The voice of more than 60 domestic and foreign banks

The Canadian Bankers Association is the voice of more than 60 domestic and foreign banks operating in Canada and their 280,000 employees. It also to provides governments and others with a centralized contact to all banks on matters relating to banking in Canada. The CBA advocates for public policies that contribute to a sound, thriving banking system to ensure Canadians can succeed in their financial goals.

The Association promotes financial literacy to help Canadians make informed financial decisions and sponsors two financial literacy seminar programs: Your Money Students and Your Money Seniors.

The Association also works with banks and law enforcement to help protect customers against financial crime and promote fraud awareness.