Again we find hackers and cybercriminals in a power position to take advantage of our uncertainty of not only what is true, but also who to look for when it comes to dispersing accurate information.  This isn’t discrediting any individual or organization, but we can all agree to admit, chaos can prevail in the current climate of COVID-19.

We see this in a recent warning advising to not click on any text messages that you receive which claim to have economic stimulus check information in them.  Victims are instructed to provide banking information for the $1200 check to be deposited into.  This trick is just another way that online crime is being committed against unsuspecting consumers – the same consumers who are likely vulnerable and looking for assistance during the pandemic.

To confirm, the CRA will never ask you for your banking information via a text or phone call and will not send unsolicited texts and emails that are asking you for personal information. If you receive any of the above, get the contact information for the caller, or close the website and go to the official CRA website to call in and inquire about the request or demand. Remember, hackers can disguise links to look legitimate, but most – if not all, government websites should end in the .gov extension – but that does not always ensure it is safe! This is just a factor that can help to determine legitimacy. 

This current scam takes you to a site that appears legitimate, and you may be inclined to enter banking information – do not do it.  The verbiage will alert you that you’ve already received the stimulus check, you just need to accept it – do not do it.  Do not click on the link.  The Get My Payment site that you are likely being redirected to is not legitimate, even if it looks like the real one.

Don’t forget to implement a strong education program within your organization’s cybersecurity plan, like the one that you can find in our own platform so that users can be continually updated with the latest scams like this very one.