6 holiday scams and how to spot them

Learn about some of the top scams you might see this holiday season — and what to watch out for.

4 minutes

Your digital banking uses powerful layers of security to protect your accounts. But it’s important you reinforce that security by being cautious online – especially during the holidays, when scammers often try to use your good cheer and busy schedule to catch you off guard. Let’s disappoint them by spotting all their tricks.

6 holiday scams to watch out for

1. Fake charities

It’s important to give back but don’t forget to research charities before you donate. Scammers will often create fake organizations to take money intended for those in need. The Canada Revenue Agency has a handy, searchable list of registered charities to help.

2. Gift card scams

We all love a bargain but, if the seller is asking for payment in gift cards, it’s important to hold off. Unlike eCommerce solutions which require sellers to pass identity checks before accepting payments, gift cards are easy to collect and untraceable, making them a scammer’s favourite method to steal funds.

3. Compromised account alerts

Getting a compromised account alert can be alarming but don’t let it scare you into acting rashly. We’ll never call, email, or text you to verify your accounts. If you’re ever uncertain, reach out to us directly rather than using the links or contact options in the communication.

4. Fake shipping notifications

With holiday shopping underway, getting a shipping notification probably won’t seem strange. That’s why scammers send fake notifications this time of year, asking for phony shipping fees or personal information to resolve non-existent issues. So make sure you use our upcoming tips to check each one before responding.

5. Look-a-like websites

Found a great brand label gift at an unbelievable price? Pause and verify the site because that price may be unbelievable for a reason. Scammers sometimes mimic the appearance of popular online retailers to trick you into sharing banking details or buying items that never arrive.

6. Free holiday apps

Anything that keeps kids entertained during the busy holiday build up is a blessing. But one tool you should be wary of is free apps. While they may look like harmless fun, they can sometimes contain predatory in-app purchases or malware targeted at stealing personal data.

4 ways to spot a scam

1. Watch out for typos & bad grammar

Scammers typically write poorly. Some say it’s because they’re in foreign countries, others think bad spelling helps bypass keyword tracking from spam filters, and still others believe it weeds out less gullible targets who won’t ultimately fall for the scam.But, whatever the reason, it’s always good to check unusual emails, websites or texts for typos and bad grammar because legitimate sources rarely make these mistakes.

2. Verify email addresses

You probably get more than a few emails a day and confirming each sender may seem like a chore. But it’s a great habit to build. While scammers are experts at imitating the appearance of real brands, email addresses are trickier to fake.The key is to look at what comes after the @ symbol:

  • Public domains – Aside from very small businesses, no legitimate organization will email from an address like Gmail or Outlook. So, if you hear from, let’s say, ‘cccu.support@gmail.com’, you know it’s a scam.
  • Misspelt domains – Scammers will often create email domains that seem real at first glance but are different when you look closer. For example, ‘service@ccu.ca’ looks genuine but it’s missing a ‘C’.

3. Check link destinations

A scammer’s main aim is usually to obtain sensitive information. One of the ways they do this is by getting people to click links and unknowingly enter that information on a fake website.Consequently, it’s important to check that each link you receive matches the source it claims to be from. For instance, the link to Coastal Community Credit Union’s website should go to cccu.ca, not to any other variation of that URL such as cccu.com or ccu.ca. Verifying a website address will help you stay safe online.

If the link is built into a button or hyperlinked text, you can still verify the URL:

On desktop – Hover your mouse over the link and the URL will appear in a pop-up or at the bottom of your browser.

On mobile – Firmly hold down the link and a website preview will appear that includes the URL.

4. Don’t be fooled by psychological tricks

Who wouldn’t be thrilled by a great deal or alarmed by a threatening alert? Unfortunately, scammers count on this to make us act before thinking. So next time you get an email about a 24-hour 90% off sale or a text demanding you log in right now to secure your account, pause, breathe, and use the tips we’ve shared above to spot those scammers.If you do get caught by a scam, though, you are not alone. We’re here and available 24/7 to support you. So, call us as soon as possible. We’ll help secure your accounts and offer advice on any other precautions to take.

For a compromised account:
  • Canada and US: 1-888-277-1043
  • International Collect: 1-306-566-1276
For a compromised credit card:

  • Canada and US: 1-855-341-4643
  • International Collect: 1-647-252-9564