Watch It Happen

This is a real scam.
Scroll through it.

The messages below are modelled on the CRA text scam circulating across Ontario. As you scroll, watch how it unfolds — and learn the exact moments where it gives itself away.

Red flag № 1
The CRA doesn't text refund links.

Look closely at that link — it isn't cra.gc.ca. Scammers register lookalike domains that feel official at a glance. The government never sends money links by text. Not once. Not ever.

Red flag № 2
Urgency is the weapon.

"FINAL NOTICE." "TODAY." "Immediately." Pressure is designed to switch off the part of your brain that asks questions. Real institutions always give you time to think and verify.

The hook
Asking is smart. Asking them isn't.

Replying "is this real?" tells the scammer your number is live — and that you're engaging. If you want to verify something, contact the organization directly through a number or website you already know.

Red flag № 3
Nobody legitimate asks for your SIN by text.

Your SIN and banking login are the keys to your identity. No government agency, bank, or company will ever ask for them in a message. A request like this is the scam declaring itself.

The defence
Pause. Verify. Then decide.

That's the whole skill. Every scam — phone, text, email, AI voice — collapses when you take one breath and verify through a channel you trust. The threats below all follow the same playbook. Now you know how to read it.

What You're Up Against

Threats by audience.

Select the group most relevant to you.

📞
Phone & Impersonation Scams

Callers pose as CRA, banks, or police — using urgency and fear to demand immediate payment.

Tap for your defence ↻
Your Defence

Hang up. Call the organization back on the number from your own card or statement — never a number the caller gives you. Real institutions will wait.

📧
Phishing Emails & Fake Messages

Fraudulent emails mimicking your bank, Amazon, or government — designed to steal your credentials.

Tap for your defence ↻
Your Defence

Read the sender's address after the @. Don't click the link — go to the site yourself by typing it. When in doubt, delete.

🤖
AI Voice & Deepfake Scams

AI can clone a voice from seconds of audio. Fraudsters use this to impersonate family members in fake emergencies.

Tap for your defence ↻
Your Defence

Agree on a family code word for real emergencies. If a "loved one" calls in crisis, hang up and call them back on their own number.

💔
Romance & Relationship Fraud

Fake relationships built over weeks or months, ending in financial requests. One of the highest-loss fraud types in Canada.

Tap for your defence ↻
Your Defence

Never send money to someone you haven't met in person. Reverse-image-search their photos, and talk to someone you trust before acting.

🔐
Account Takeover

Weak or reused passwords allow criminals into banking, email, and health portals. Password reuse is one of the most exploited vulnerabilities.

Tap for your defence ↻
Your Defence

One account, one password — a password manager makes that easy. Turn on two-factor authentication everywhere it’s offered.

📰
Misinformation & Fake News

AI-generated articles, photos, and videos spread false health, financial, or political claims that appear completely legitimate.

Tap for your defence ↻
Your Defence

Check the source before you share. If a story triggers a strong emotion, that’s exactly when to verify it twice.

💬
Cyberbullying & Harassment

Persistent harassment through social platforms, gaming chats, and messaging apps — causing severe emotional harm.

Tap for your defence ↻
Your Defence

Don't reply. Screenshot everything, block the account, use the platform's report tools — and tell a trusted adult. You are not alone in this.

🎮
Gaming Scams & Predators

In-game strangers build trust before requesting personal info, money, or to meet in person.

Tap for your defence ↻
Your Defence

Never share personal info or send money to in-game strangers. Real friends don't ask you to keep secrets from your family.

🕵️
Identity Grooming

Adults posing as peers online to gradually earn trust — moving from public platforms to private messaging before escalating.

Tap for your defence ↻
Your Defence

Pushing to move to private chat — or asking you to keep a friendship secret — is the red flag. Tell a trusted adult immediately.

👣
Digital Footprint & Privacy

Posts, photos, and check-ins create a permanent record. Youth often don't realize how much personal information is publicly visible.

Tap for your defence ↻
Your Defence

Before posting, ask: would I be okay with a future employer seeing this? Set accounts to private and review your tags regularly.

⚠️
Sextortion & Image-Based Abuse

Youth coerced into sharing images, then blackmailed. This is a crime — and it must be reported, not hidden.

Tap for your defence ↻
Your Defence

It is never your fault, and paying never ends it. Stop contact, save the evidence, and report it — police or Cybertip.ca — right away.

🎭
Deepfakes & AI Content

AI creates fake news, deepfake videos, and impersonation accounts. Youth are among the highest consumers of this content.

Tap for your defence ↻
Your Defence

Verify before you believe or share: are reputable outlets reporting it too? If it's built to shock you, that's your cue to slow down.

Warning Signs

If you see any of these —
pause. Verify before you act.

Scammers rely on one thing: that you don't know the warning signs. Now you will.

1
Urgency & Pressure

"Act NOW or face consequences." Real institutions — banks, government, police — always give you time to think and verify.

2
Unexpected Contact

A call, email, or message from someone you know — but something feels off. Trust that feeling. Hang up and call them directly on a number you know.

3
Requests for Secrecy

"Don't tell anyone about this." This is always a manipulation tactic. Legitimate organizations never ask you to keep contact secret.

4
Gift Cards or Wire Transfers

No government agency, bank, or legitimate company ever asks for payment via gift cards or wire transfer. Ever. Full stop.

5
Too Good or Too Alarming

Incredible prizes, urgent threats, or emergency family calls designed to panic you into acting fast. Emotion is the weapon — awareness is the defence.

6
Moving to a Private Platform

Someone asking to move from a public chat to WhatsApp, Telegram, or text is a red flag — especially if you don't know them well.

Test Yourself

Spot the red flags.

Below is a fake email — the kind that lands in Ontario inboxes every day. Tap or click everything that looks suspicious. There are five red flags hiding in plain sight.

From: Amazon Security <>
Subject:

We detected unusual activity on your account. To avoid permanent suspension, verify your identity immediately by clicking the secure link below:

If verification fails, you may restore access by purchasing and replying with the codes.

Thank you,
Amazon Security Team

Found: 0 of 5
You found all five. That instinct — pausing, reading closely, questioning — is the entire defence. Share this page with someone who needs it.
Between Rounds

Every scam has the same skeleton.

Phone, text, email, AI voice — the costume changes, the anatomy never does. Learn these four beats and you've learned them all.

🎣
The Hook

Something you want — or something you fear. A refund, a prize, a grandchild in trouble.

⏱️
The Pressure

A clock starts. "Today only." "Final notice." Urgency exists to switch off your judgment.

🔑
The Ask

Codes. Logins. Gift cards. Your SIN. The moment anyone asks, the mask is off.

🕳️
The Loss

Money first, silence after. Break the chain at any earlier step and this one never happens.

Quick Round — All Ages

Real… or scam?

Six messages, modelled on what actually lands on Ontario phones. Call each one. Instant feedback — and the reason behind every answer.

Checkpoint

You can now spot what most people miss.

Lookalike domains
Manufactured urgency
Code & SIN requests
Gift-card demands

Now lock it in — the arcade below drills it at speed.

Arcade Mode

Inbox Defender.

Messages are falling toward your inbox. Tap the scams to zap them — but let the real ones through. Three shields. It gets faster. Good luck.

Score: 0
Shields: 🛡️🛡️🛡️

Ready?

Zap the scams. Spare the real messages. Protect the inbox.

Every "scam" in this game is modelled on a real pattern from the threats above. If you can zap it here, you can spot it in real life.

Your Protection Plan

Three steps anyone can take
starting today.

No technical background required. These actions significantly reduce your risk.

1
Secure Your Accounts
  • Use a unique password for your email — never reuse it anywhere
  • Enable two-step verification on banking and email
  • Keep a written password list at home — not on your phone
2
Pause Before You Act
  • Urgency is a trick — hang up, then verify independently
  • Call back using a number from the official website only
  • Never send money, gift cards, or personal info under pressure
3
Know Your Online Presence
  • Review what is publicly visible on your social profiles
  • Talk to youth in your life about privacy settings
  • Think before you post — what could this reveal about you?

Want someone to walk you through this in person?

Book a Free Consultation