Article
’Tis the season to stay cyber smart. As online shopping, travel and charitable giving ramp up, scammers do too, now supercharged by AI that makes fake websites, emails and even videos look very real. Fraud attempts tend to spike around major shopping weeks, so it’s important to slow down, verify, and protect your money and personal information.
Banks in Canada operate multiple layers of security, invest heavily in cyber defences, monitor transactions 24/7, and collaborate with law enforcement and other sectors through national anti scam initiatives. And customers play a vital role by recognizing red flags and reporting suspicious activity through the National Cybercrime Coordination Centre online reporting system.
1. AI powered brand impersonation & cloned shopping sites
Scammers use AI to set up professional looking retail sites, deepfake ads, and near perfect phishing emails that impersonate trusted brands or influencers, especially around Black Friday/Cyber Monday, and the holiday season.
Protect yourself: Go directly to retailers by typing their address; compare prices across known sites; and opt to use your credit cards for stronger dispute rights.
2. QR code traps in ads, emails and packaging
Malicious QR codes can send you to spoofed sites or initiate fake app downloads.
Protect yourself: Preview the URL after scanning and before tapping; use your camera (not a third party scanner that auto opens); avoid codes from unknown sources.
3. Social marketplace fakes (TikTok/Instagram/Facebook)
Counterfeit goods and phantom "too good to miss" offers proliferate on social platforms; many link to cloned sites designed to capture card details.
Protect yourself: Research the seller outside the platform; check domain spelling carefully; stick to trusted retailers you can independently verify.
4. Delivery & shipping notification scams
"Missed delivery," "redelivery fee," or "confirm address" texts mimic Canada Post or couriers and push you to spoofed payment pages.
Protect yourself: Track parcels only through the retailer’s app/account or the carrier’s official site you navigate to yourself.
Fraudsters demand urgent action, ask for one time passcodes, or send links/attachments that "verify your account." Your bank will never ask for passwords or one-time codes by email, text, or phone.
Protect yourself: Don’t click links in unsolicited messages. If unsure, call your bank using the number on the back of your card or in the official app.
6. Account takeover of shopping & loyalty accounts
Criminals use stolen passwords in credential stuffing attacks to drain stored cards, gift balances and loyalty points.
Protect yourself: Enable multi-factor authentication wherever available; never reuse passwords; watch for password reset emails you didn’t trigger.
Requests to pay fees, taxes or urgent bills with gift cards are always scams. Gift cards are also targeted for balance theft and resale.
Protect yourself: Buy cards only from reputable retailers; keep receipts; never share gift card numbers/pins via phone/text.
Scammers build online relationships, then coax victims into sending money or "investing," often in crypto, via slick fake trading apps.
Protect yourself: Be skeptical of financial pitches from people you’ve never met in person; don’t move conversations off platforms quickly; never send money or crypto to new online "friends."
9. Fake charities & crowdfunding appeals
The spirit of giving is exploited through look alike charities or emotional fundraisers. Verify registration before donating.
Protect yourself: Search the CRA list directly and donate via the charity’s official site, never via links in unsolicited messages.
Texts or calls claim a loved one needs immediate money for bail, fees or an accident, sometimes with AI cloned voices.
Protect yourself: Set a family code word for emergencies; refuse pressure to keep it secret.
11. "Free" public Wi Fi hotspots
Criminals set up rogue hotspots to intercept logins and card details or to push malware. Avoid accessing financial accounts on public Wi Fi.
Protect yourself: Confirm the network name with staff; disable auto connect and file sharing; use your mobile data or a trusted VPN for sensitive activity.
12. Digital pickpocketing (contactless/NFC skimming)
In crowded places, criminals may try to skim data from cards or trick you into tapping on tampered terminals.
Protect yourself: Use tap to pay only on trusted terminals.