Your phone rings. The screen shows your bank’s name. The person on the line says someone just used your credit card, or money is leaving your account right now, and they need your help to stop it.
If that call ever comes, how would you know it isn’t real? That matters right now. On October 30, 2026, the Ontario Provincial Police warned that they are seeing more reports of exactly this. The Canadian Anti-Fraud Centre says Canadians reported losing more than $28 million to bank investigator scams in 2025.
I work in a security operations centre, so I spend my days looking at how attackers get into accounts. Most of them don’t break in. They get someone to open the door. This scam is built to do that.
What the OPP is reporting
The OPP’s East Region Integrated Fraud Awareness and Response Initiative (IFARI) says it has seen an increase in reports from people contacted by scammers who claim to represent a financial institution. The usual opening is that your credit card was used for purchases you didn’t make, or that money was stolen from your bank account.
The OPP described one recent case. The scammers allegedly posed as fraud representatives from a major financial institution. They used caller ID spoofing and a fake verification website to win the victim’s trust and collect personal and banking information. After that, they allegedly got into the victim’s financial and electronic accounts, changed email settings and made unauthorized credit card purchases. The losses were significant.
Notice the order. The scammers didn’t start by stealing. They started by sounding helpful.
How the call usually unfolds
Here is the sequence, based on the OPP’s description plus the general way these phone fraud scripts are built. I’ll flag where I’m adding general knowledge.
- The scary opening. They say your card or account has been compromised. This is straight from the OPP report. The goal is to get your heart rate up so you stop thinking carefully.
- The borrowed identity. Your phone shows what looks like your bank’s number. The OPP is blunt about this: caller ID can be manipulated and is not proof of who is calling.
- The “verification” step. The caller needs to confirm you are the real account holder. This may involve a website they send you to, which the OPP says can be fraudulent, or questions about your personal and banking details. Either way, the real purpose is to collect what they need to get into your accounts.
- The access request. The OPP advises never giving remote access to your computer to someone you don’t know or trust. In general, a caller asking you to install software or let them “look at” your screen is trying to see and control what you do. That includes your banking.
- The quiet changes. In the case the OPP described, the suspects changed email settings. In general, changing the email on an account lets an attacker intercept alerts and reset passwords while you’re none the wiser.
- The money moves. Unauthorized purchases and transfers follow. By the time you notice, the call is long over.
The red flags in the script
When an analyst reviews a suspicious sign-in, we look for the things that don’t fit how the real owner behaves. You can do the same with a phone call. Listen for these:
- They called you. Real fraud teams can contact customers, but you can always verify by calling back through a number you trust. A scammer will resist that.
- Urgency. “We have to act in the next few minutes.” Pressure is there to stop you from hanging up and checking.
- They want you to prove who you are. A genuine bank already knows who you are. When the caller is the one asking you to verify details, treat that as a warning. This is general guidance, not something from the OPP report.
- A website or link you’ve been sent. The case the OPP described involved a fraudulent verification website. A page can look polished and still be fake.
- A request for remote access. There is no good reason for a stranger on the phone to control your computer.
- Caller ID as proof. If the caller says “check the number, it’s us,” that’s a script line. The number proves nothing.
- Don’t tell anyone, or don’t hang up. If they discourage you from ending the call or talking to someone else, that’s a pressure tactic. Again, this is general practice and not from the OPP article.
What to do today
The OPP’s advice is simple, and it works because it breaks the scammer’s control of the conversation.
- Hang up. You don’t owe a caller politeness or an explanation.
- Call your bank back using the number printed on the back of your bank or credit card. Not a number the caller gave you. Not the number on your call display. If there really is a problem, the bank will tell you.
- Never give remote access to your computer to someone you don’t know or trust.
- Decide your rule ahead of time. Tell the people in your home or business, especially anyone who handles banking, that the rule is “hang up and call the number on the card.” It’s easier to follow a rule you already made than to invent one under pressure.
Signs something already went wrong
If you stayed on the line, shared details, typed information into a website they gave you, or let someone onto your computer, check for these:
- Credit card purchases you don’t recognize.
- Money missing from your accounts.
- Changes to the email settings on your accounts that you didn’t make. This was part of the case the OPP described.
- Anything on your computer you didn’t set up yourself, if you gave someone access.
If you see any of these, call your bank right away using the number on your card. Then report it. The OPP encourages anyone who suspects fraud, or who has lost money, to contact local police and the Canadian Anti-Fraud Centre. You can file through the centre’s online Fraud Reporting System or by phone at 1-888-495-8501.
Don’t be embarrassed. The OPP describes these scams as increasingly sophisticated, and the tools they use, like spoofed numbers and fake websites, are designed to fool careful people.
When to get help
If money has left your account, or someone has had access to your computer or your email, don’t wait to see what happens. Contact your bank first, then local police and the Canadian Anti-Fraud Centre. If you gave someone remote access, say so when you talk to your bank so they know the whole picture.
The one habit worth keeping from all of this: any call that makes you feel rushed about money is a call you can end. Hang up, then call back on a number you trust.
Sources
- OPP warns of rise in bank investigator scams targeting Canadians, 107.7 WOW FM (myFM News), October 30, 2026
Featured image: Image by ElasticComputeFarm from Pixabay.
