Your phone rings. The screen shows your bank’s name, or a number that looks right. A calm person says they’re from the fraud department and someone just tried to use your credit card. Are you the one who made these charges?
That is the opening of a bank investigator scam. If you have a parent, a grandparent, or a busy employee who answers the phone, it’s worth five minutes of your time. The Ontario Provincial Police (OPP) recently warned that these calls are increasing, and the numbers are large.
What happened
The OPP East Region Integrated Fraud Awareness and Response Initiative (IFARI) says it is seeing more reports from people contacted by fraudsters who claim to represent financial institutions. According to the Quinte News report on the OPP warning, the callers often say there are suspicious or unauthorized charges on a credit card, or that money has been stolen from a bank account.
The OPP described one recent case. The fraudsters posed as fraud representatives from a major financial institution. They used caller ID spoofing, a fraudulent verification website, and what the OPP calls deceptive tactics to earn the victim’s trust and collect personal and banking information. Then they got into the victim’s financial and electronic accounts, changed email account settings, and ran fraudulent transactions. The victim lost a significant amount through unauthorized credit card purchases.
The same report cites the Canadian Anti-Fraud Centre: Canadians reported losing more than $28 million to bank investigator scams in 2025. That’s only what was reported.
How the call usually unfolds
The OPP lists the main ingredients. I’ll fill in the steps between them with how these scams generally work, so you can recognize the shape of it.
- The scare. Someone says there are unauthorized charges or that your money is at risk. The point is to make you worry and act fast.
- The proof. Your call display may show the bank’s name or number. That is caller ID spoofing, and the OPP is clear that you should not assume the number on your screen is accurate.
- The verification. The caller may send you to a website to “verify” who you are. In the OPP’s example, that website was fraudulent. Anything you type into it goes to the criminals.
- The collection. You’re asked for personal and banking details. In general, this is where card numbers, online banking logins, and codes get handed over.
- The takeover. With enough information, they get into your accounts. In the OPP case they also changed email account settings. Your email is usually how other accounts send password resets, so whoever controls it can quietly take over more.
Another warning in the OPP release: never give remote access to your computer to someone you don’t know or trust. Remote access lets a stranger see and control your screen, including your banking.
The words to hang up on
This is what I would tell a parent. You don’t need to judge whether the caller sounds real. These scammers sound real. You only need to recognize a few phrases and have one sentence ready.
Hang up if the caller says any of these:
- “This is the fraud department. Did you make these charges?”
- “Don’t hang up, we need to stay on the line to protect your account.”
- “Go to this website to verify your identity.”
- “I need you to install a program so I can look at your computer.”
- “Read me the code we just sent you.”
- “Don’t tell anyone at the branch about this call.”
Only the first of those is directly in the OPP’s description. The others are common pressure lines. They all do the same job: keep you on the phone and keep you from checking. A real bank can handle a customer saying “I’ll call you back.” A scammer can’t.
The sentence to have ready is the one the OPP recommends: tell the caller you will call them back using the telephone number on the back of your bank card or credit card. Then hang up and do exactly that.
Tell your parents it’s fine to be rude. Hanging up on a real bank costs you a minute. Staying on with a fake one can cost you thousands.
How to tell if this affects you
If you have a bank account, a credit card, or a phone, it can. This isn’t limited to people who are careless. The calls work because they’re well rehearsed and they reach people at a bad moment.
Some people are more exposed: anyone who answers unknown numbers, anyone who handles the family’s banking, and small business owners who get calls about business accounts. If you’re self-employed, your business and personal money may sit at the same bank. One successful call can reach both.
What to do today
- Pick your rule and say it out loud. “If the bank calls me, I hang up and call the number on my card.” Tell your family and anyone who works for you.
- Find the card. Know where the card is and that the number is printed on the back. Under pressure, people forget this.
- Don’t trust the call display. A name or number that looks right proves nothing.
- Don’t open links or sites the caller gives you. If you need to check your account, go to your bank’s app or type the address yourself, or call the number on the card.
- Never allow remote access to your computer for someone you don’t know or trust. Install nothing at a caller’s request.
- Know your email is a key. Since the OPP case involved changed email settings, it’s worth checking yours now. Look for forwarding rules or recovery details you don’t recognize. Use a strong, unique password and turn on two-step sign-in if your email offers it. This is standard practice when anyone reviews an account for tampering.
- Talk to the person in your family who’s most likely to get this call. A two-minute conversation beats any article.
Signs something already went wrong
If you stayed on a call like this, or typed details into a site a caller sent you, watch for:
- Card purchases you didn’t make
- Email settings you didn’t change, or messages missing from your inbox
- Password reset emails you didn’t ask for
- Login alerts from your bank or other services
- Someone having had remote access to your computer
In the OPP’s example, the damage was unauthorized credit card purchases after the fraudsters got into the victim’s accounts. Don’t wait to see if more shows up.
When to get help
Call your bank right away, using the number on the back of your card, and tell them what happened. Ask them to secure your accounts and cards.
Then report it. The OPP says to report suspected fraud, or being a victim of fraud, to your local police service and to the Canadian Anti-Fraud Centre. You can use its online Fraud Reporting System or call 1-888-495-8501. Reporting matters even if you didn’t lose money. It helps police see what’s going around.
If you gave someone remote access to your computer, have a trusted IT person or a professional check it before you use it for banking again.
And if you’re not sure whether a call was real, treat it as fake. Hang up, find the number yourself, and call back.
Sources
Featured image: Image by VinzentWeinbeer from Pixabay.
