Section 4
Protect Yourself
Protection doesn't mean living in fear or treating every interaction with suspicion. It means building a small number of simple habits that give you more time to think, set up stronger barriers around your money and information, and make it harder for scammers to reach you in the first place.
This section covers three areas: everyday habits, technical tools that add layers of protection, and social strategies that use your relationships as a defence. You don't need to do everything at once — even one or two of these changes can make a meaningful difference.
Everyday habits
These habits don't require any technology or special knowledge. They are simple shifts in how you respond to unexpected requests.
- 1
Slow Down and Pause
Before responding to any unexpected request — especially one involving money or personal information — take a breath. You do not have to respond right now. Give yourself time, and the picture often becomes much clearer.
- 2
Never Click Unfamiliar Links
Whether the link arrives by email, text, or social media — if you didn't expect it, don't click it. Go directly to the website by typing the address yourself. This one habit blocks a very large proportion of phishing scams.
- 3
Never Give Personal Information When Someone Calls You
Your banking details, SIN, date of birth, passwords, and PINs should only be shared when you initiate contact with a trusted institution. Share when you call your bank — not when your bank (or someone claiming to be) calls you.
- 4
Hang Up and Call Back
If someone claims to be from your bank, the CRA, Service Canada, or a utility — hang up and call back using the official number from their website or the back of your card. Not the number they gave you. The official number you find yourself.
- 5
Talk to Someone Before Sending Money
Make this a personal rule with no exceptions. Before sending money to anyone, through any method, tell a trusted person first. Scams thrive in isolation. A conversation is often all it takes to break the spell.
As a reminder from Section 3: urgency, secrecy, unusual payment methods, requests for personal information, threats, emotional pressure, requests for remote computer access, and one-time passcode requests are all reasons to stop and verify. These habits and that list work together.
Set up barriers
These tools add technical protection around your accounts and devices. Some may sound complicated — but most can be set up with help from a family member, library staff, or your bank, and they don't need day-to-day management once in place.
Two-Factor Authentication (2FA)
Adds an extra step to logging in: after your password, you confirm with a second method — usually a code sent to your phone. Even if someone gets your password, they can't access your account without your phone. Turn this on for banking, email, and any account with personal information. Ask a family member or your bank for help.
Strong, Unique Passwords
Use a different password for each important account — especially email and banking. A strong password is at least 12 characters with a mix of letters, numbers, and symbols. A password manager (such as Apple's Keychain) can generate and store them, so you only remember one main password.
Direct Deposit for Regular Payments
Set up direct deposit for your pension, government benefits, or regular income. Money that goes directly into your account — rather than arriving by cheque — is much harder for fraudsters to intercept or divert.
Bank Alerts and Notifications
Most Canadian banks let you set up text or email alerts when transactions occur — especially above a certain amount. These let you catch unusual activity quickly. Call your bank or check their app; it takes a few minutes and costs nothing.
Call-Blocking Tools
Apps like Nomorobo and Robokiller can filter known spam and robocall numbers on smartphones in Canada. Your phone carrier may also offer free call-blocking or spam labelling — check with them. Some providers offer call-blocking for landlines too.
Recovery Contact for Your Email
Make sure your email account has an up-to-date recovery email or phone number attached. This lets you regain access if you're ever locked out or your account is compromised. Check your email settings and update this if it's out of date.
Protecting yourself is not about being suspicious or unfriendly. It is about giving yourself time to think, a few technical barriers that work quietly in the background, and the comfort of knowing you have people you can turn to. That is all it takes to significantly reduce your risk.
Social defences
Your relationships are not just meaningful in life — they are also one of your most reliable defences against fraud. Scammers depend on isolation. The more connected you are, the harder it is for a scam to take hold.
Stay connected with people you trust
Regular conversations with family and friends create natural chances to share concerns and get a second opinion before acting. You don't need to frame it as "I think I might have been scammed." A simple "I got a strange call today — does this sound right to you?" is often enough.
Agree on a secret word — something only your immediate family knows — that anyone can use to verify their identity in an emergency. If you receive a call from someone claiming to be a grandchild or family member in trouble, ask for the word. A real family member will know it; a scammer won't. Choose something simple and memorable, share it with everyone in your immediate family, and revisit it every year or so.
Talk openly about suspicious activity
Many people feel embarrassed to admit they received a suspicious call or nearly fell for something. But sharing these experiences — with friends, a community group, or a healthcare provider — reduces shame, builds awareness, and helps protect others. When someone you know mentions a strange call, take it seriously and help them verify it.
Be thoughtful about what you share on social media
Scammers routinely research targets on social media before making contact. A public profile can reveal family members' names, grandchildren's ages, where you live, recent events, and travel plans — all used to make a scam feel personal and convincing. Review your privacy settings on Facebook, Instagram, and any other platform, and set your posts to "Friends only."