Phishing
FRAUDULENT MESSAGES
Be vigilant
We are detecting a large number of fraudulent e-mails, calls or SMS/text messages that appear to come from UNI or Desjardins. All of these messages are fraudulent.
For your security:
- Do not click on these messages.
- Forward them to phishing@uni.ca
- Destroy them.
If you get a phone call:
- Do not give any personal information.
- Hang up.
What is phishing?
Criminals use different tactics to get you to provide personal information or click on links. These tactics include:
- Using false email addresses and websites
- Creating a sense of urgency
- Offering reimbursement or money
- Making a seemingly harmless request to click on links, download an attachment or complete an online form
For example, a fraudster could send an email, text or social media message, or contact you by impersonating an institution (see article on false employee scams) or a known business, such as:
- A bank
- An online subscription service like Netflix or Amazon
- A business
- A government department or agency
The message may prompt you to update your account due to fraudulent transactions or tell you that your tax refund is ready. Whatever the message, it is a scheme to get you to provide personal or financial information.
A variation on phishing involves sending messages that contain little text and encourage you to click on links or download attachments. The message may look like an invoice for a recent purchase, a delivery notice or a more urgent notification, such as a court summons. If you click on the link or download the attachments, your computer will be infected with a virus or malware.
*Source: Canadian Anti-Fraud Centre
 |
This is a screenshot of a fraudulent text message. UNI won’t send you texts like this. It reads, “We’ve disabled account starting with 4540 13**. Activate https://accweb.mouv.acadie3.cfd/Activation ext/'@10929120.net(*).” This is a malicious link. |
Tips for protecting yourself
- Don’t click on any links in unsolicited messages.
- Don’t download any attachments from unsolicited messages.
- Check messages for spelling errors.
- Don’t assume that a message is legitimate simply because the email address looks right. Fraudsters can change it.
- Be wary of messages that appear to come from the Government of Canada or a law enforcement agency. They will never contact you to offer funds by email or wire transfer.
- Never provide confidential authentication information via email (SIN, credit card number, date of birth, password, etc.). UNI will never ask for that kind of confidential information when WE contact you.
Examples of situations designed to trigger a knee-jerk reaction
| URGENCY | PROFIT | PROBLEM |
| Request to update bank or personal information | Purchase, refund or transfer of funds to your account | Problem or update with applications or Windows, password expiration, disk space limits exceeded, etc. |
| Amount due to a tax agency | Winner of a prize, trip, etc. | Package delivery issue |
| Fundraising following a natural disaster or tragic event or other request for money | Offer of an incredible discount | Problem, suspension, fraudulent transactions or unauthorized charges with your client card or bank account |
Be aware!
What should you do if you receive a fraudulent email or text message?
- Don't click any links, texts or images.
- Don't open any attachments or activate any document macros.
- Don't download or authorize any images.
- Don't reply to the sender. It only confirms that your email is valid.
- Forward the email to phishing@uni.ca. You will receive an automated reply.
- Delete the email.
What should you do if you've replied to a phishing email or text message?
- Change your password for the site right away.
- Contact us now: 1 888 359-1357
- Forward the email to phishing@uni.ca. You will receive an automated reply.
- Delete the email.
We also recommend that you contact credit agencies such as Equifax (1-800-465-7166) and TransUnion (1-877-713-3393), so they can add a note to your file alerting credit grantors that you may have been the victim of fraudulent activity.