Malicious programs.

What’s a malicious program?

Malicious programs, or malware, can take numerous forms, including viruses, ransomware, Trojan horses, keyloggers, among others. In all cases, these programs are installed without the user’s knowledge and attempt to compromise the security of the user’s data.

They typically come from:

• harmful sites that may have been visited by accident or by selecting a link;

• attachments in unsolicited emails or spam;

• software downloaded online that didn’t come from a trustworthy company.

How to spot a malicious program.

Most malicious programs show recognizable symptoms, showing that the computer or mobile device is infected.

These symptoms include:

• The computer's performance slowing down noticeably;

• A delayed response to input commands;

• Web browser redirects to unselected pages and many pop-up windows appear that are hard to close;

• Changes to the wallpaper image or messages asking for personal information, often with a demand for payment to restore the computer to normal.

What to do if you suspect a malware infection.

1. Resist If the malware requests information, tells you to select a link or demands payment, don’t do it. Otherwise, the situation may get worse.

2. Clean

A computer infected by one or more malicious programs must be cleaned to make it secure to use again.

To do so:

• Use a reputable antivirus or antimalware software.

• Use specific tools designed for cleaning up specific malware.

• Get the help of a qualified technician to clean the computer.

To prevent infections by malware, refer to the tab, How to protect yourself.

For more information on malicious programs, refer to the following websites:

Canadian Bankers Association – Protecting yourself from ransomware

Government of Canada – What is malware: How to protect yourself

Back to top

Social media.

What are the risks of social media?

Regularly using various social media platforms makes users attractive targets for cybercriminals. Unfortunately, you may unknowingly share personal information, thinking it's only going to friends or close connections. This lack of caution exposes you to potential cyberattacks.

How to protect yourself on social media.

1. Be cautious.

Always pay attention to what’s being shared on personal profiles, since a criminal could use such details for identity theft.

• Never post phone numbers, addresses, birth dates with the year or other personal information.

• Never share banking information, not even the bank’s name.

2. Accept friend requests only from known contacts.

Using judgment before adding “friends” to a personal network is also a good practice, as the identity of whom is behind an online account may be hidden. A new friend could be a criminal trying to get personal or financial information.

3. Check who can view your profile details.

Regularly review and verify the security and privacy settings of your social networks. Don’t just accept the default settings, which generally allow more information than necessary.

4. Learn about privacy policies.

It may be helpful to carefully review the website’s privacy policy. Be sure that there is no clause allowing the social network to use the posted information, as this might lead to the sale of email addresses or other personal details.

For more information on the risks associated with social media, refer to the following websites:

Canadian Bankers Association – Managing your online identity

Government of Canada – Social media

Back to top

Interac e-Transfer^®.

How secure is Interac e-Transfer?

Interac e-Transfer features like Send Money, Request Money and Autodeposit are secure. It's one of the safest digital money transfer services in the world. For more information, visit the Interac e-Transfer security website.

How to spot scams that use Interac e-Transfer features:

Even though sending funds with Interac e-Transfer is safe and secure, fraudsters and scammers may still leverage Interac e-Transfer features for phishing and malicious purposes.

Scams related to Send Money, Request Money and Autodeposit.

• Request Money scam: When selling items online, be cautious if you plan to complete the purchase using Interac e-Transfer. Instead of sending a money transfer, a scammer or “potential buyer” may send you a request for money instead. Read the email carefully, because if you select “Accept”, you’ll end up sending money instead of receiving money.

• Fake representative scam: Scammers send an email or text message that looks like a legitimate notification. The message will ask you to confirm your transfer by providing information like the answer to your Interac e-Transfer security question or by directing you to select a link to claim funds. Doing so will give the scammer access to your security question. Never select a link or provide the answer to your security question if you or someone you know hasn’t initiated the request.

• Online sales platform scam: Buying something from an independent seller online can be risky. The seller may ask for payment upfront with Interac e-Transfer or by sending a Request Money instead. Once you send money, you may never hear from the seller again.

• Apartment rental scam: Fake landlords post rental properties and claim to be out of the country. They request that you send a security deposit with Interac e-Transfer. Once they receive your money, they break off all contact and disappear.

• Loan scam: Ads for an attractive loan offer will ask that you pay notary, insurance or other fees in advance through Interac e-Transfer. A legitimate financial institution would never do this.

Beware of phishing attempts that send you a money transfer you weren’t expecting. If you accept the Interac e-Transfer request and provide your personal information to retrieve the money, you may be handing it directly to a scammer.

How can I protect myself when using Interac e-Transfer features like Send Money, Request Money and Autodeposit?

Only act on transfer notifications from senders that you know. Legitimate notifications provide the legal name of individuals and the full business name for Request Money notifications. If you know the sender, contact them to confirm the request is intentional.

If you receive a notification email that looks suspicious, be sure to check that it’s valid before you select any links. When in doubt, forward the notification immediately to phishing@interac.ca.

Carefully read the transfer notification to determine if the request is to send or receive money. A Request Money notification clearly states “request for money,” while an Interac e-Transfer notification says “sent you money”.

We strongly recommend you register for Autodeposit to automatically deposit all Interac e-Transfer requests directly into your chosen bank account. This reduces your risk of becoming a victim of phishing or other scams by clicking and accepting fraudulent Interac e-Transfer notifications and requests for money.

What can I do if I’m the victim of a scam or fraud through Interac e-Transfer?

If you see any unusual transactions on your account or suspect you’ve been a victim of fraud or a scam, contact us or escalate the claim to the Fraud Prevention Department.

Back to top

Identity theft.

What’s identity theft?

Identity theft happens when a person takes and uses personal information for criminal purposes without the owner’s knowledge or consent.

How to spot identity theft:

• You’re no longer receiving emails, or there's an unexpected change in the account's email address.

• You receive unfamiliar account statements.

• You notice unauthorized transactions on credit card or bank account statements.

• You receive calls demanding payment for unrecognized expenditures.

What to do if you’re the victim of identity theft.

Immediately contact the Fraud Prevention Department.

For more information on identity theft, refer to the following websites:

Canadian Bankers Association – Learn the signs of identity theft and how to protect yourself Government of Canada – Protecting yourself from identity theft online

Back to top

Back to Security threats