This week’s scam highlights a new twist on phishing tactics that use real organization tools to create convincing bait. Victims are receiving appointment confirmation emails that appear to come directly from the National Bank of Canada. At first glance, everything seems legitimate since the sender’s address looks official and the email references suspicious activity on your account. To resolve the supposed issue, the message provides a phone number and urges you to call right away.
Behind the scenes, however, cybercriminals are the ones setting this trap. They visit the bank’s genuine website and submit a Contact Us form. Within that form, they insert a fake support number and a false warning about account activity, often mentioning services like PayPal to increase urgency. Once submitted, the bank’s system automatically sends a confirmation email back that looks authentic in every way. The scammers then forward that same email to unsuspecting individuals. If you call the number provided, you’ll reach the cybercriminal instead of the bank and risk exposing sensitive personal information.
How to Stay Safe
Don’t trust appearances. Even emails that seem to come from official sources can be manipulated.
Avoid using contact details listed in suspicious messages. Always go directly to the company’s website to find verified customer service information.
Pause before taking action. Remember, legitimate organizations rarely pressure you to act immediately.
Scammers are becoming increasingly creative, sometimes using real websites to make their schemes look credible. Always take a moment to think before you click or call.