Math101 · Independent Ontario learning library
The pressure pattern
Scams change stories but often reuse the same structure:
- Authority or opportunity: bank, CRA, police, landlord, employer, professor, delivery service, scholarship or romantic interest.
- Emotion: fear, excitement, embarrassment, scarcity or sympathy.
- Urgency: act now, keep the line open, do not tell anyone.
- Control: click this link, install this app, share the code, move money, cash a cheque or buy gift cards/crypto.
- Isolation: “Your parent/bank/manager will interfere.”
The story can be polished and caller ID can be spoofed. Verification must use contact information you find separately.
Student-targeted scenarios
Fake job or task scam
A “recruiter” sends a cheque, asks the student to buy equipment, transfer the remainder, process payments or receive packages. The cheque may appear in the account before it is later found fraudulent. A real-looking deposit is not final proof.
Rental scam
A supposed landlord cannot show the unit, demands a deposit immediately, or uses stolen listing photos/ID. Verify the property, authority and exact unit before paying.
School-account phishing
An email claims a tuition refund, password expiry, shared document, payroll update or urgent dean/professor request. Go to the institution’s portal yourself and contact IT.
Government or bank impersonation
A caller threatens arrest, deportation, SIN cancellation, account closure or tax consequences unless money/information is provided. Hang up and use the official site/account/number. CRA explains that its legitimate contact does not use many tactics found in scams.
Marketplace and ticket fraud
Fake e-transfers, overpayments, shipping fees, counterfeit tickets and account-takeover messages target buyers and sellers. Do not send money to receive money.
Relationship/investment fraud
Trust is built before an emergency or “exclusive” investment appears. Refusal to video meet, repeated crises, secrecy and guaranteed returns are warning signs. Investment registration can be checked through official securities-regulator tools.
Protect the accounts that unlock everything
Prioritize email, banking, mobile-phone, school, CRA and government accounts.
- Use unique long passwords stored in a reputable password manager.
- Turn on multi-factor authentication; use stronger methods than SMS where supported.
- Add a carrier account PIN and ask about port-protection options.
- Keep recovery email/phone current.
- Enable login, transaction and profile-change alerts.
- Install updates and lock devices.
- Back up important files.
- Never approve a login prompt you did not initiate.
- Never read a one-time code to an incoming caller—even one who knows personal details.
Service Canada says not to carry a SIN document and to share the number only when required. A SIN is not identification.
The 10-minute pause script
I do not make urgent financial or identity decisions during an incoming contact. I will verify this through the organization’s published channel and respond later.
Then:
- end the call/chat;
- screenshot without clicking further;
- ask a trusted person to review;
- type the official address or use a saved app;
- call the number on the bank card, statement or official website;
- search the exact request plus “scam” through trusted sources;
- proceed only after independent confirmation.
Embarrassment is a scammer’s tool. Asking for help is security practice.
If you clicked but sent nothing
- Disconnect from a remote-control session.
- Do not continue entering information.
- From a known-clean device, change the affected account password and any reused password.
- Revoke unknown sessions/app access.
- Contact institution IT or the relevant provider.
- Scan/update the device according to trusted technical guidance.
- Watch accounts and credit reports.
Do not pay a stranger who claims to “recover” funds or clean a device after contacting you unexpectedly; recovery scams target prior victims.
If money or identity information was lost
Act in this order, adapted to the incident:
- Financial institution/payment provider: call the official fraud number immediately; ask what can be stopped, recalled or secured.
- Accounts: change credentials from a safe device and protect email/mobile first.
- Police: report when money, identity theft, threats or other crimes are involved; keep the occurrence number.
- Canadian Anti-Fraud Centre: report attempted or completed fraud through the National Fraud Reporting System or official phone route.
- Credit bureaus: review Equifax and TransUnion reports, dispute unknown items and ask about fraud alerts/security-freeze availability in your province.
- Government program: contact CRA, Service Canada/SIN or another affected program through its official fraud process.
- Institution/employer: report compromised school/work credentials or records.
- Evidence log: date, amount, account, contact, reference number and next action.
Do not delete messages before preserving evidence. Do not confront a suspected criminal in person.
Family response that helps
Start with: “We are going to limit the damage.” Do not shame the person or confiscate every account without understanding what happened. Shame delays reporting and makes repeat targeting easier.
Agree on a family rule: any unusual transfer, gift card, crypto, remote-access request or secret emergency gets a second-person check. This is not distrust; it is two-person authorization for high-risk actions.
Monthly security check
Can my bank reverse a scam payment?
Possibly, but not always. Contact the bank/payment provider immediately through its official fraud channel. Do not promise yourself recovery or pay a “recovery agent.”
I feel stupid. Should I wait until I am sure it was fraud?
No. Early reporting can protect accounts and evidence. Skilled scams exploit ordinary trust and pressure. Tell the institution the facts and let it assess.
Does the government suspend a SIN by threatening phone call?
Treat threats of immediate SIN cancellation/arrest and demands for payment or codes as suspicious. End the contact and verify through Service Canada’s official SIN pages.
