Fraudsters are increasingly targeting businesses and individuals with sophisticated “impersonation” scams.
The culprits use “spoofing” techniques that allow their emails or Caller ID numbers to appear to be from legitimate organizations like banks. They then pose as a bank’s “Fraud Department,” claim that the client’s account is in jeopardy and ask the client to download remote access software that gives them control of the clients’ desktops.
Once clients have allowed access through screen sharing and provided information such as passwords, the fraudsters can then gain access to the client’s bank account.
All business clients and individuals should be aware of these scams and take precautions to avoid becoming victim to them.
Here is some guidance to follow if you receive a call or email from someone saying they are calling from Scotiabank asking to share your screen, passwords, one-time passwords (OTP) or other confidential information:
Hang up on suspicious calls immediately.
Never give out account or personal information over the phone including bank account and credit card details, passwords, OTPs, PINs and SIN. Legitimate organizations will not need this information to verify you.
If you have any doubts, call the number on the back of your bank or credit card.
Report the sender email or phone number and website address (URL) to phishing@scotiabank.com.
Remember that:
Scotiabank will never ask for confidential information through text message or email.
Scotiabank will never ask you to download an app or third-party software through a phone call, email, text message or enclosed link.
Clients must exercise caution in viewing unexpected links, attachments, unusual payment requests or requests for confidential information.
Here are some resources to learn more about the latest scams and how to avoid them:
