The hook
Something you want, or something you fear.
A refund. A prize. A grandchild in trouble. It’s built to get your attention before your judgment.
These aren’t hypothetical. They happen every day in communities like yours, and knowing what to look for is the single most effective protection there is.
01 · Watch it happen
Modelled on the CRA text scam going around Ontario. Watch it unfold, and learn the exact moments it gives itself away.
ScrollKeep scrolling and the conversation plays out, one red flag at a time.
Look closely: that link isn’t canada.ca. Scammers register lookalike addresses that feel official at a glance. The government never sends money links by text. Not once.
“Final notice.” “Today.” “Immediately.” Pressure is designed to switch off the part of your brain that asks questions. Real institutions give you time to think and verify.
Replying “is this real?” tells the scammer your number is live and that you’re engaging. To check, contact the organization yourself through a number or website you already know.
Your SIN and banking login are the keys to your identity. No government agency, bank or company will ever ask for them in a message. A request like this is the scam announcing itself.
That’s the whole skill. Every scam (phone, text, email, AI voice) falls apart when you take one breath and check through a channel you trust.
02 · Know what you’re up against
Pick the group closest to you, then open any threat to see your defence.
Try itPick a group, then open any threat to reveal your defence.
Hang up. Call the organization back on the number from your own card or statement, never a number the caller gives you. Real institutions will wait.
Read the sender’s address after the @. Don’t click the link; go to the site yourself by typing it. When in doubt, delete.
Agree on a family code word for real emergencies. If a “loved one” calls in crisis, hang up and call them back on their own number.
Never send money to someone you haven’t met in person. Reverse-image-search their photos, and talk to someone you trust before acting.
One account, one password. A password manager makes that easy. Turn on two-step verification everywhere it’s offered.
Check the source before you share. If a story triggers a strong emotion, that’s exactly when to verify it twice.
Don’t reply. Screenshot everything, block the account, use the platform’s report tools, and tell a trusted adult. You are not alone in this.
Never share personal information or send money to in-game strangers. Real friends don’t ask you to keep secrets from your family.
Pushing to move to a private chat, or asking you to keep a friendship secret, is the red flag. Tell a trusted adult right away.
Before posting, ask: would I be okay with a future employer seeing this? Set accounts to private and review your tags regularly.
It is never your fault, and paying never ends it. Stop contact, save the evidence, and report it to police or Cybertip.ca right away.
Verify before you believe or share: are reputable outlets reporting it too? If it’s built to shock you, that’s your cue to slow down.
03 · Warning signs
Scammers count on one thing: that you don’t know the signs. Now you will.
“Act now or face consequences.” Banks, government and police always give you time to think.
A message from someone you know, but something feels off. Trust that. Call them on a number you already have.
“Don’t tell anyone about this.” Always a manipulation tactic. Real organizations never ask for secrecy.
No government agency, bank or legitimate company ever asks to be paid in gift cards. Ever.
Incredible prizes, urgent threats, emergency family calls. Emotion is the weapon; awareness is the defence.
Someone pushing you from a public chat to WhatsApp, Telegram or text is a red flag, especially if you barely know them.
04 · Test yourself
A fake email, the kind that lands in Ontario inboxes every day. Tap everything that looks suspicious. Five red flags are hiding in plain sight.
Try itSelect anything in this email that looks suspicious. There are five.
From Amazon Security <>
Subject
We detected unusual activity on your account. To avoid permanent suspension, verify your identity immediately by clicking the secure link below:
If verification fails, you may restore access by purchasing and replying with the codes.
Thank you,
Amazon Security Team
Found 0 of 5
You found all five. That instinct (pausing, reading closely, questioning) is the entire defence. Share this page with someone who needs it.
05 · Between rounds
The hook
A refund. A prize. A grandchild in trouble. It’s built to get your attention before your judgment.
The pressure
“Today only.” “Final notice.” Urgency exists for one reason: to switch off the part of you that asks questions.
The ask
Your SIN, a verification code, a payment nobody normal would ask for. The moment anyone asks, the mask is off.
The loss
Break the chain at any beat before this one, and this one never happens. Phone, text, email, AI voice: same skeleton.
Keep scrolling
06 · Quick round, all ages
Six messages, modelled on what actually lands on Ontario phones. Make the call and see the reason behind every answer.
Try itRead each message, then choose Real or Scam.
07 · Your protection plan
No technical background required. Each one meaningfully lowers your risk.