Staying safe on social media
Make sure you’re well-equipped to identify and report social media scams with our latest tips and advice to protect your personal information and devices.
Scammers use social media to:
- Take over your accounts after having illegally obtained your password or one-time code.
- Impersonate someone by creating a fake account using personal information, photos, and posts to make the account as credible as possible.
- Use AI to generate fake, but credible, profiles and messages.
- Use deepfake technology to create realistic videos, phone calls, or voice messages to imitate you, a loved one, or a public figure.
- Impersonate a company, public figure, or senior executive in order to trick you into sending personal information, carrying out a transaction, or signing up for a subscription.
- Convince you to click a fraudulent link (otherwise known as “phishing”) in order to obtain your personal or banking information, install malicious software, or create a backdoor on your device.
Popular scams on social media
Regardless of the platform, scammers’ methods are the same. Here are some common social media scams.
Stolen accounts
Scammers don’t necessarily need to hack into your account to get your personal information. They can:
- Exploit information you’ve posted publicly.
- Reuse passwords obtained from a data breach.
- Send you a fraudulent email, text message, or direct message with a phishing link.
There are a few easy steps you can take to protect your account:
- Make sure to use a unique password for every account and platform.
- Enable multi-factor authentication (MFA).
- Be wary of password reset emails, or unexpected sign-in requests.
- A credible password manager can help you create and update your passwords for each account.
Imposters on a professional network
Your boss’s boss just sent you a friend request. The photo matches and they’re connected to all the other members of your team. You’re delighted to receive a message from them with a link about good news regarding the company. Pause before you click.
Scammers manage to fool users from a specific company or industry by creating fake accounts on professional networks. They’ll use AI-generated messages and posts to gain trust to get you to click on a link or download a file. Always verify that a link is legitimate before clicking on it by hovering over it to check the actual website address.
Malware links on your feed
You’re looking at the latest posts on your feed. Suddenly, a new article pops up. The headline sounds so interesting that it's tempting to click right away to learn more without thinking. But clicking a malicious link could expose your devices to malware or compromise your personal information.
If a link seems unusual, misleading, or too good to be true (“Connor McDavid signs with the Canadiens”, “You’ve won $1M!”, etc.), it usually is. Take a few seconds to ask yourself: Could this be true? Can I trust this information?
Trick contests
A giveaway that promises an incredible prize. All it takes is a quick form to confirm your entry. Before handing over your personal information, make sure that the contest is legitimate. Scammers often impersonate real brands and use the promise of great prizes to collect your personal information.
Be cautious of offers that seem too good to be true, unusual requests, or contests promoted by pages you don't recognize. Before entering, always verify that the page genuinely belongs to the company it claims to represent. If you're unsure, visit the company's official website or social media channels directly rather than using links provided in the post.
When a harmless game isn't so harmless
Be wary of posts that invite you to answer personal questions to generate a fun message to share with friends and family. Details such as your birth date, the name of a pet, the school you attended, or your hometown can be used by scammers to access your accounts or steal your identity.
Romance scams
According to the recent data from the Canadian Anti-Fraud Centre, victims of romance scams have reported losing millions of dollars. Don’t be blinded by love on social media.
Romance scams often begin with a few friendly messages and quickly move to another platform or channel. Be cautious if someone quickly tries to move the conversation from Facebook to WhatsApp or another messaging platform. As trust grows, the scammer creates a sense of urgency and asks for more personal information or money, usually through a bank transfer or payment app.
The relationship may seem genuine, but there is usually no in-person meeting. The person behind the profile is often using a fake identity and misleading photos.
Unfortunately, this is a common pattern used in romance scams. If someone you have met online asks you for money or personal information, take a step back before acting. Be cautious of requests involving emergencies, travel expenses, medical bills, or other urgent situations, and never send money or share financial information with someone whose identity you cannot independently verify.
AI and deepfake scams
With the help of AI and deepfake technology, scammers have the ability to create highly convincing videos, voice recordings, and messages that appear remarkably real. Their goal is simple: to gain your trust long enough to steal your money or personal information.
In an online world where appearances can be deceiving, staying vigilant is more important than ever. Take a moment to verify unexpected requests, question anything that seems unusual, and be cautious when sharing personal or financial information. When in doubt, pause and verify before you act.
Marketplace and payment scams
You find an item at an unbeatable price. Or maybe a buyer shows strong interest in something you're selling. Everything seems legitimate until you're asked to pay a deposit, confirm a payment through a link, or provide your financial information.
Scammers often use online marketplaces to create a sense of urgency and pressure you into acting quickly. They are more interested in the money than the item sold, often refuse to negotiate, and may ask for a deposit before you even see the item in person. They may provide fake proof of payment, send fraudulent shipping links, or request payment through methods that are difficult to trace.
Before buying or selling, verify the identity of the other party and be cautious of unusual requests. If an offer seems too good to be true or you're being pressured to complete the transaction quickly, take a step back. Spending a few extra minutes to verify the details could help you avoid significant financial losses. In addition, choose secure meeting locations, such as designated exchange areas at police stations. A refusal to meet there could be a warning sign.
Five tips to help you protect yourself on social media
1. Protect your online accounts
Choose a strong and unique password. You may have many passwords to remember; a password manager could help you store them securely. Also, whenever it’s available, enable multi-factor authentication.
2. Limit the amount of personal information you share
Everything you post online could be used by scammers to gain your trust or impersonate you. Avoid sharing more information than necessary, including vacation or travel photos while you're away. Wait until you return home before posting them. This applies not only to your personal information, but also to details about your loved ones, your education, and your professional background.
3. Check your privacy settings
It’s important to pay attention to the information you share, but you also have to control who you share it with. Make sure to regularly update your settings to control who can message you, see your posts, and tag you.
4. Beware of fake accounts
Be vigilant when accepting friend requests. After having created a fake account, scammers will try to communicate with their targets via chat to send them fraudulent links. A few ways you can identify fake accounts include checking for suspicious profile pictures (that’s probably not Ryan Gosling adding you on Facebook), an imbalanced follower-to-following ratio, and missing personal history. An account created recently (for example, less than 6 months ago) with little or no personal activity history is also a red flag.
5. Control your online identity
To reduce the risk of identity theft and online impersonation, monitor your digital footprint by searching for your name online, on social media platforms, and other online channels.
If you discover a fake profile or content, report it to the platform immediately and follow the recommended steps to request its removal. Proactive identity monitoring can help you detect fraudulent activity early and limit the potential impact on your personal information and reputation.
How do you report fraud?
If someone has hacked your account, immediately contact the social media platform on which the fraud occurred. Make sure to secure your accounts and change your passwords. If you’ve noticed instances of fraud on your bank account or your credit report, even though you’ve followed security best practices, contact your bank as soon as possible. Afterwards, you can report the account or person to the Canadian Anti-Fraud Centre on their website or to the law enforcement authorities in your region.
To limit the risk of social media fraud, develop the same safety reflexes as you have for your email. Scammers adapt their tactics to people’s behaviour, so prevention is key.
There are simple things you can do to protect yourself.