Recognizing Phishing and Scams Course: Verifying requests and reporting scams

1. Question 1 of 17

   An unexpected message asks you to act. Where should you get the contact details to check it?

   • AFrom a source you choose, like the official website
   • BFrom the phone number the caller reads out to you
   • CFrom the link in the message
   • DFrom the signature block at the bottom of the message
   Show answer

   Answer: A. From a source you choose, like the official website

   Contact details in a scam message can be fake, so find them yourself through a trusted source.

2. Question 2 of 17

   What does "out-of-band" verification mean?

   • AReplying in the same email thread
   • BChecking a request after work hours, when you have more time
   • CAsking the sender to send it again
   • DChecking through a different channel than the request used
   Show answer

   Answer: D. Checking through a different channel than the request used

   The Cyber Centre advises confirming requests through verified, out-of-band (alternate) channels.

3. Question 3 of 17

   You report a suspicious email to IT at work. Should you also forward it to coworkers as a warning?

   • AOnly if it has an attachment
   • BNo; follow IT's instructions and do not forward it
   • CYes, send it to as many people as possible to warn them
   • DYes, but only to your own team
   Show answer

   Answer: B. No; follow IT's instructions and do not forward it

   The Cyber Centre says to follow your IT team's instructions and not to forward the email to coworkers.

4. Question 4 of 17

   What is the CAFC's online site for reporting fraud and cybercrime?

   • Acyber.gc.ca/en/guidance
   • Bgetcybersafe.gc.ca/en/secure-your-accounts
   • Creportcyberandfraud.canada.ca
   • Dcanada.ca/en/revenue-agency
   Show answer

   Answer: C. reportcyberandfraud.canada.ca

   The CAFC directs people to report online at reportcyberandfraud.canada.ca.

5. Question 5 of 17

   When does the CAFC answer its toll-free reporting line?

   • A24 hours a day, every day
   • BWeekends only, 9 am to 5 pm
   • CMonday to Friday, 10 am to 4:45 pm Eastern time
   • DMonday to Friday, 8 am to 8 pm Pacific time
   Show answer

   Answer: C. Monday to Friday, 10 am to 4:45 pm Eastern time

   The CAFC answers calls on weekdays from 10 am to 4:45 pm Eastern time and is closed on holidays.

6. Question 6 of 17

   Can you report a scam to the CAFC online without giving your name?

   • AOnly by phone, not online
   • BNo, you must give your SIN
   • CYes, you can report anonymously
   • DOnly if you lost more than $1,000
   Show answer

   Answer: C. Yes, you can report anonymously

   The CAFC says you can report online anonymously.

7. Question 7 of 17

   In the CAFC's steps for fraud victims, what comes first?

   • APost the scammer's name on social media
   • BStay calm and gather all information about the fraud
   • CCall the scammer to demand a refund
   • DDelete every message from the scammer so it can't contact you
   Show answer

   Answer: B. Stay calm and gather all information about the fraud

   The CAFC says to collect your thoughts and gather documents, receipts and copies of emails or texts.

8. Question 8 of 17

   When you report a fraud to your local police, what does the CAFC suggest you get?

   • AA file number for future reference
   • BA new Social Insurance Number
   • CA letter for your employer
   • DA refund of the money you lost
   Show answer

   Answer: A. A file number for future reference

   A police file number helps you follow up and connect later reports to your case.

9. Question 9 of 17

   For identity fraud, which steps does the CAFC list along with contacting your financial institutions?

   • AChange only your social media password
   • BFlag accounts, change passwords, tell both credit bureaus
   • CClose your email account and buy a brand-new phone and SIM card
   • DWait for the scammer to contact you again
   Show answer

   Answer: B. Flag accounts, change passwords, tell both credit bureaus

   The CAFC says to place flags on your accounts, change all passwords and report the fraud to both credit bureaus.

10. Question 10 of 17

    Read the situation. Who should Omar contact first, according to the CRA?

    Omar got a call from someone who said they were from the CRA. Scared, he gave his SIN and date of birth before he realized it was a scam. He did not send any money.

    • AThe CRA, which can add protections to his account
    • BThe scammer, to ask them to delete his data
    • CHis employer's payroll department
    • DNo one, since he did not lose money
    Show answer

    Answer: A. The CRA, which can add protections to his account

    The CRA says to contact it first if you gave information to a scammer, then notify other authorities and the CAFC.

11. Question 11 of 17

    Read the situation. Later, Omar thinks his SIN is being misused. Which organization should he contact about that?

    Omar got a call from someone who said they were from the CRA. Scared, he gave his SIN and date of birth before he realized it was a scam. He did not send any money.

    • AService Canada
    • BThe Cyber Centre
    • CHis bank's branch manager
    • DHis mobile phone provider
    Show answer

    Answer: A. Service Canada

    The CRA says to contact Service Canada if your Social Insurance Number was misused.

12. Question 12 of 17

    A caller says he works with the government and asks you to send money to help catch the scammer who robbed you in a "sting" operation. What should you know?

    • ASend a small amount first to test it
    • BPolice and the CAFC never ask you to send money
    • CIt is safe if the caller gives you a badge number
    • DThis is how police normally run fraud investigations with victims
    Show answer

    Answer: B. Police and the CAFC never ask you to send money

    This is a recovery pitch. The CAFC says it and the police will never ask you to transfer funds or make any payment.

13. Question 13 of 17

    You are not sure where to report a cyber incident. Which Cyber Centre page helps both individuals and organizations find the right place?

    • AThe 7726 text reporting service
    • BThe "Report a cyber incident" page
    • CYour phone's recent calls list
    • DThe CRA's callback verification tool
    Show answer

    Answer: B. The "Report a cyber incident" page

    The Cyber Centre's Report a cyber incident page asks whether you are an individual or an organization and shows where to report.

14. Question 14 of 17

    You gave your card number to an online store that now seems fake, but you are not sure. What does the Cyber Centre advise?

    • AAsk the store's chat support what happened
    • BAct quickly anyway and contact your card issuer
    • CWait until the charge appears on your next statement
    • DAct only once you are certain it was a scam
    Show answer

    Answer: B. Act quickly anyway and contact your card issuer

    The Cyber Centre says it is important to act quickly even if you are unsure, and to ask your card issuer to cancel or reverse the charge.

15. Question 15 of 17

    You clicked a link in a scam message and a file downloaded. What does the Cyber Centre suggest?

    • ARestart and keep using the device as normal
    • BRun an antivirus scan, and at work tell your IT team
    • CSend the file to a friend to test it
    • DDelete the file and tell no one, since nothing happened yet
    Show answer

    Answer: B. Run an antivirus scan, and at work tell your IT team

    The Cyber Centre suggests an antivirus scan if you clicked a link or downloaded a file; at work, report it to IT right away.

16. Question 16 of 17

    Why should you report a scam attempt even if you gave no information and lost no money?

    • AThe scammer must stop once you report
    • BReporting earns you a reward
    • CYou could be fined by the government if you do not report
    • DReports may help law enforcement with investigations
    Show answer

    Answer: D. Reports may help law enforcement with investigations

    The CRA says to report attempts to the CAFC even if you gave no information, because reports may help law enforcement with their investigations.

17. Question 17 of 17

    Read the situation. What should Kai do?

    Kai is a payroll clerk at Riverbend Clinic. A caller who sounds exactly like the clinic director, Dr. Ana Silva, says she is at a conference and needs Kai to e-transfer $4,800 to a new medical supplier today.

    Clinic policy: rush payments and new payees need a call-back to the number in the staff directory and a second manager's approval.

    • ASend half now and the rest after the conference
    • BCall back on the directory number and get a second approval
    • CSend it, since the voice clearly belongs to Dr. Silva and she is the boss
    • DAsk the caller to email the request instead
    Show answer

    Answer: B. Call back on the directory number and get a second approval

    A familiar voice can be cloned. The Cyber Centre advises clear phone verification processes and calling back on a known number.

Keyboard: 1–4 to answer, Enter for the next question.