
On this page
- Never transfer money to a stranger
- Never give out your financial information
- Be careful with hyperlinks in emails
- Avoid using simple passwords
- Protect your Social Insurance Number (SIN)
- Always protect your sensitive information with antivirus software
- Shop online carefully
- Never download anything from pop-up windows
- Always visit safe websites
- Check direct debits and act on unauthorised payments
- If a scam has already happened
Tips to Protect Yourself from Financial Scams
Financial scams are one of the worst experiences a person can go through. They can be traumatic and demoralizing and cause a lot of headaches. Fraudsters use technology to carry out online scams, steal personal information and impersonate people or businesses. Knowing what to check before sending money or sharing information can help reduce the risk.
Here are a few quick and simple tips to protect yourself from financial scams:
1. Never transfer money to a stranger
At some point, you have probably received odd emails from someone claiming that a person has died and left them with a huge debt, or that a child has a major illness and needs money for surgery. These messages try to persuade you to send money, sometimes to an overseas account. Requests may also involve an e-Transfer, cryptocurrency or gift cards.
Money sent to a fraudster can be difficult to recover, especially after an overseas transfer. However, recovery is not always impossible. If money has already been sent, contact your bank or payment provider immediately and ask whether the transaction can be stopped or recalled. Do not wait for the sender to reply.
There are also times when someone has hacked the email account of a person you know and sends messages asking for financial help. Before sending money out of concern, call the person using a number already saved in your contacts. Do not rely on the contact details supplied in the suspicious message.
2. Never give out your financial information
It is important to understand the importance of your financial information and never share it with a person or business you do not know. All financial information is sensitive, and you must keep it private.
Banks and credit card companies may make legitimate calls, but an unexpected call is not proof of identity. Never disclose a banking password, PIN, card security code or one-time verification code to an unexpected caller.
Fraudsters may pretend to represent a bank and ask for sensitive details. This is a form of phishing. If a caller creates pressure or asks for a payment to protect an account, end the conversation and verify the request independently.
If you receive a suspicious call or email and are concerned about your account, call your credit card company or bank using the number on your card or its official website. Do not use a number supplied in the suspicious message.
3. Be careful with hyperlinks in emails
If an unexpected email asks you to click a link, open an attachment or enter financial information, pause before responding. Open the official app or type the organisation’s website address yourself to check the request.
Deceptive emails and links are commonly used in phishing. Pharming is different: it redirects someone to a fraudulent website. A familiar sender name or copied bank logo does not prove a message is genuine.
4. Avoid using simple passwords
Passwords like “12345” will not protect you from financial scams because they are easy to crack. Hackers can easily crack passwords that consist of simple number combinations or a common pet name.
Choose a passphrase made from four or more random words, with at least 15 characters in total. If a service does not support a long passphrase, Canadian cyber security guidance recommends a password of at least 12 characters combining uppercase and lowercase letters, numbers and special characters.
Use a unique password for every account. A password manager can help create and store them. Enable multi-factor authentication where available, and change a password promptly if it has been exposed or an account may be compromised.
5. Protect your Social Insurance Number (SIN)
In Canada, the relevant number is a Social Insurance Number, or SIN. Keep it private and do not send it in response to an unexpected message.
Some legitimate organisations need a SIN for authorised purposes, such as employment or reporting income. Before providing it, ask why it is needed, whether it is legally required and how it will be protected. Verify the organisation independently. A SIN should not be treated as general identification.
6. Always protect your sensitive information with antivirus software
It is important to protect sensitive information stored on your computer by installing antivirus software, a firewall or spyware protection.
Turn on automatic updates for your security software, operating system, browser and apps. Security software can help reduce risk, but it cannot guarantee protection against every scam. Continue checking requests before sharing information or sending money.
7. Shop online carefully
Online shopping is quite popular these days. Clothing, household items and groceries are available online at discounted prices. You can also book various services online.
It has therefore become even more important never to shop with unfamiliar or unsafe online retailers. Do some research beforehand to ensure that the business is legitimate and trustworthy. Search for independent customer reviews and complaints before shopping. Check the seller’s contact details, return policy and payment options. Reviews can be fabricated, so consider several sources rather than relying on testimonials shown on the shop’s own website.
8. Never download anything from pop-up windows
Be aware of pop-up windows that appear online and claim that your computer is unsafe. If you click on the pop-up and start downloading, it may claim to scan your system or install another program.
A fake warning can trick someone into installing malware or unwanted software. Close the page and check the device through security software already installed from a trusted source. Do not call a support number shown in an unsolicited pop-up.
9. Always visit safe websites
Check the exact website address before entering financial information. Look for misspellings or extra words that could indicate an imitation website. Read the site’s privacy policy and terms, but remember that scammers can copy these too.
HTTPS encrypts information sent between the browser and website. It does not prove that the business is legitimate. Fraudulent websites can also use HTTPS, so a padlock alone is not enough.
When using CashLift, review its privacy policy and terms and conditions to understand how the service handles information and what terms apply.
10. Check direct debits and act on unauthorised payments
Pre-authorized debits are a normal way to pay phone, utility and other bills in Canada. There is no need to cancel every legitimate automatic payment. Instead, check statements regularly and investigate unfamiliar charges.
If a debit was not authorised or differs from the agreement, contact your bank promptly to discuss dispute options and any applicable deadlines.
To cancel an authorised arrangement, follow the cancellation process in the agreement and notify the biller in writing. Ask the bank about a stop payment if needed, and keep checking statements. Cancelling the payment arrangement does not cancel money already owed. Arrange another way to pay legitimate bills.
If a scam has already happened
Contact the bank or payment provider immediately. Keep messages, receipts and transaction references. If login details were shared, change them through the genuine website or app and check for unfamiliar account activity.
Do not send more money to someone who promises to recover the loss for an upfront fee. For more borrowing information and financial guides, visit CashLift.

