I think I have been scammed

Real stories

A warning, a message or a link on your screen

A pop-up says your computer is hacked. A text says a parcel is waiting. A friend writes to say they are selling something. Each one asks you to call, click or pay. Under each story: where it could have been stopped, and how.

How these scams work

The same steps, every time

Each step is what the scammers do, then what stops them at that step. The numbers in each story match these steps.

  1. Stage01 A pop-up, a text, or a message from a friend’s account. What stops it Closing the page, and never calling a number that appears in a pop-up. Read more
  2. Stage02 Something is wrong, or something is waiting for you. What stops it Going to the company yourself, by the address or number you already have. Read more
  3. Stage03 A website or a voice that looks exactly right. What stops it Typing the address yourself instead of clicking a link or a search ad. Read more
  4. Stage04 Your card details, a password, or a deposit. What stops it Never typing card details or passwords into a page a message sent you to. Read more
  5. Stage05 Cash to a stranger, or your account emptied overnight. What stops it The real reason, told to the teller, including what you were told to say. Read more
  6. Stage06 Stay on the line; one more step to fix it. What stops it Hanging up, and phoning someone you know. Read more
  7. Stage07 Embarrassment, and friends who lost money too. What stops it Telling your bank, the police and the Anti-Fraud Centre, today. Read more
the Canadian Anti-Fraud Centre where scams get reported nationally, which is not the same as being investigated

It gathers reports from across the country so that patterns can be seen. Your own case belongs to the local police force, and the Centre does not work it. It cannot move money either.

Surrey, British Columbia · February 2025

A pop-up, nine hours on the phone, and $20,000 in a parking lot

Lost $20,000

On January 30, a pop-up on Naomi’s computer said it had been hacked. She called the number on the screen. A man from a “fraud department” told the 84-year-old former teacher that her accounts were compromised, and that she must withdraw $30,000 to stop it going to Mexico.

Over nine hours she called him more than 40 times. Twice she handed $10,000 to a person in a parking lot. She was told to tell bank staff the money was for a car payment.

“I’ll never lose my trust for people.”

Naomi, 84

When the bank closed early for a birthday party, she told a neighbour, who saw what was happening. She had not called her sons; she thought she had to deal with it alone. They called the police, and a community fundraiser raised more than $20,000.

CBC News, 26 February 2025. “Community rallies in support of Surrey, B.C., senior who lost $20K in scam”

Step by step, and what stops each one

  1. Stage 01

    A pop-up saying her computer had been hacked, with a number to call.

    What stops it here

    A warning that gives you a phone number is the scam. Close the browser, or turn the computer off, and call nobody from the screen.

  2. Stage 02

    A “fraud department”: her money was about to go to Mexico.

    What stops it here

    The fright is the point; it keeps you from checking. Ring your bank on the number on your card before doing anything a caller asks.

  3. Stage 04

    Withdraw $30,000, and tell the bank it is for a car payment.

    What stops it here

    If the teller asks, say what you were told: “They told me to say it is a car payment.” That sentence is all the bank needs to step in.

  4. Stage 05

    Two handovers of $10,000 in a parking lot.

    What stops it here

    No bank or fraud department collects cash from you in a parking lot. A handover to a stranger is the scam, every time.

  5. It stopped here

    Stage 06

    More than 40 calls in nine hours, and more to withdraw.

    The bank closed early, and she told a neighbour.

    What stops it here

    A caller who keeps you on the line all day is keeping you from talking to anyone else. Hang up and tell one person what is happening.

Sussex, New Brunswick · May 2024

A friend’s post, a friend’s name, and a deposit to a stranger

Friends lost $2,500 in deposits

Lesa got an email that looked like it came from Facebook: her account had been compromised. She typed in her old password and a new one. Then she was locked out of her own account for three days.

In that time, the scammer posted as her. A parent had moved into long-term care, the posts said, and belongings were for sale: hot tubs, trucks, tractors. Friends sent deposits totalling $2,500.

“I would not have fallen for it, except that I thought it was my friend Lesa.”

Carol, who lost $250

Carol noticed an unfamiliar name on her e-transfer receipt. Lesa reported it to the police and the Canadian Anti-Fraud Centre. “I always thought I was so Facebook savvy,” she said. “But it’s so easy.”

CBC News, 27 May 2024. “Facebook account takeovers are targeting people you know, turning friendship into fraud”

Step by step, and what stops each one

  1. Stage 01

    An email that looked like Facebook: your account is compromised.

    What stops it here

    An email about your account is a reason to go to the account yourself, by opening the app. Never through the link in the message.

  2. Stage 02

    Her friends saw a sale posted by someone they trusted.

    What stops it here

    A message from a friend asking for money or a deposit can come from a stolen account. Phone the friend on the number you already have before you pay.

  3. Stage 04

    Both passwords, typed into the page the email linked to.

    What stops it here

    No real login page needs your old password through a link someone emailed you. If you typed one in, change your email password first, then the rest, then the bank’s.

  4. Stage 05

    Deposits by e-transfer, to a name Carol did not know.

    What stops it here

    An unfamiliar name on the transfer is the sign Carol caught. Check who the money is going to before you press send.

Calgary · January 2023

She thought the parcel was a Christmas present from her brother

Bank returned almost $2,700

A text arrived “out of the blue”, supposedly from Canada Post: a package was waiting. Hilary thought it was a Christmas present. Her brother knew she was short of money, and she thought he might be sending some.

She clicked the link and followed the instructions, which asked for her banking information. The next morning, almost $2,700 was gone from her account.

“I was angry. I was angry at myself for falling for a scam.”

Hilary

She reported it to her bank straight away. The bank investigated and refunded all of it, and told her it gets up to seven reports a day about scams like this one. Her advice: “Don’t open up links you don’t recognize.”

Global News, 4 January 2023. “Calgary woman loses thousands of dollars to package delivery scam”

Step by step, and what stops each one

  1. Stage 01

    A text about a parcel, out of the blue.

    What stops it here

    A text about a parcel you were not expecting is a reason to check with the delivery company directly, never through its link.

  2. Stage 04

    A website that asked for her banking information.

    What stops it here

    A delivery never needs your banking details. A page that asks for them is the scam.

  3. It stopped here

    Stage 07

    She called her bank the next morning.

    She reported it to her bank straight away.

    What stops it here

    Speed is what got her money returned. Call your bank’s fraud line the moment you think your details have gone; banks hear about these every day.

London, Ontario · June 2025

She searched for the tax agency’s website and found a copy

Lost $26,820

Ruth runs her own company and needed a business account with the Canada Revenue Agency (CRA). She searched for “CRA Business login” and clicked the first result. It looked like the agency’s site, and the agency’s name was on it.

It asked for her Social Insurance Number and other personal details, then her bank card number, its expiry date and her bank-machine password. When she submitted them, the screen went black. Her account was emptied of $26,820.

“I feel sad and angry. I didn’t know this could happen.”

Ruth

CTV News, 24 June 2025. “Spoofed tax agency website results in Ontario woman’s bank account being emptied”

Step by step, and what stops each one

  1. Stage 03

    The first search result, with the agency’s name on it.

    What stops it here

    Paid ads sit at the top of search results, and anyone can buy one. Type the government address in yourself, or start from canada.ca.

  2. Stage 04

    Her card number, expiry date and password.

    What stops it here

    No government site asks for your bank card and its password. A page that does is a copy, however real it looks.

Do this beforehand

Each of these started with something on a screen that asked to be clicked or called.

Hilary called her bank the next morning and her money was returned. Before you click, call or type anything in, reach the company yourself, by a number or an address you already know.