11 tips on how to avoid, detect and report phishing scams 

Phishing is one of the most common types of fraud. It involves pretending to be a financial institution or other well-known organization to trick someone into giving away their money or confidential information. Scammers contact a large number of people by email, text, phone and even social media in the hopes of hooking just a few. Read on to find out how you can protect yourself from taking the bait.

You could install malware on your device without even knowing, just by clicking a link, image or file or downloading content. Links can also send you to fake sites where scammers collect your banking information, password and other valuable information.

If you get a suspicious message or you're not sure about the sender, just don't click.

Phishing isn't always about stealing your money. Sometimes scammers want your password so they can get into your accounts with financial institutions, social media and online retailers, for example. Then they use your personal and financial information to open a fraudulent account or apply for a loan.

Be careful if someone asks you for this kind of information, especially if you're not the one who started the conversation.

• Choose strong passwords External link.. Think of a password that no one can guess, not even your family or friends. Use at least          12 characters including upper and lower case letters, numbers and special characters. Choose a different password for every account. Use a password manager to keep track of all your passwords. That way, you only have one password to remember!
• Keep your devices and software up to date and use antivirus software.

• Turn on the 2-step verification External link.. With 2-step verification, you'll be asked to enter your password and then a single-use code that's sent to you by email or text. Turn on the 2-step verification whenever you have the option to boost the security on your account.

Always keep your login information to yourself. It's an easy way to prevent your password for your banking account and personal identification number (PIN) for your debit or credit card from falling into the wrong hands. If you share this information with other people, you can be held responsible for all the transactions in your account, including fraudulent ones.

It may seem like no big deal to share your birthday, where you live or work, or where you went on your last vacation, but scammers use this kind of information to make their messages even more convincing. This type of psychological manipulation is known as social engineering.

Social engineering involves pretending to be someone the victim trusts to get them to share information. For example, while you're away on vacation, scammers could steal your identity and try to trick friends and family into sending them money by pretending you're in trouble.

A lot of scams involve some kind of unexpected situation or problem that requires you to act fast, without thinking things through. For example, scammers might ask you to update your personal information or risk having your accounts frozen or closed. Or you might be told that you have to pay a fee because a package for you has been held at the border.

Check what's going on by calling the person or company directly. Don't use the contact information in the message you receive: go online and find the official number yourself.

Ah! Who can resist free stuff? It's pretty unlikely that you won a contest you never entered or that a company issued you a credit without you ever asking for it. And you'll never receive your tax refund or government benefits by Interac ®e-Transfer. If you receive a text message offering up free cash, you should hear alarm bells ringing.

Cybercriminals are often trying to use your curiosity to their advantage. Did a message grab your attention? Consider whether someone you know would really send you a vague message saying "Is it you in this video?!" and asking you to open an attachment. It's much more likely that their account or email was hacked and that scammers are trying to trick their contacts.

Oops, you clicked the link? Whether or not you provided any personal or confidential information, here's what you need to do:

Forward the email or text message to protection@desjardins.com so we can inspect it. However, we won't follow up with you. Don't do anything else with the message: Just delete it.

If you gave out your personal or confidential information, notify the following organizations to prevent scammers from opening fraudulent loan or credit card accounts in your name and boost security for your account:

• Your financial institution and any other financial partners

• Credit bureaus Equifax External link. and TransUnion External link.

• The Canadian Anti-Fraud Centre 

Regularly check your banking and credit card accounts for suspicious transactions.

Also check for malware or unusual software on the device you were using during the phishing attempt. One way to do this is by running your antivirus software. This step will help prevent scammers from spying on your actions.

Do it quickly so that scammers don't do it first and lock you out of your various accounts. Use a different device than the one that may have been hacked, in case spyware is tracking your actions and recording your new login information.