Recognizing Phishing and Scams Course: Verifying requests and reporting scams

1. Vraag 1 van 17

   An unexpected message asks you to act. Where should you get the contact details to check it?

   • AFrom a source you choose, like the official website
   • BFrom the phone number the caller reads out to you
   • CFrom the link in the message
   • DFrom the signature block at the bottom of the message
   Toon antwoord

   Antwoord: A. From a source you choose, like the official website

   Contact details in a scam message can be fake, so find them yourself through a trusted source.

2. Vraag 2 van 17

   What does "out-of-band" verification mean?

   • AReplying in the same email thread
   • BChecking a request after work hours, when you have more time
   • CAsking the sender to send it again
   • DChecking through a different channel than the request used
   Toon antwoord

   Antwoord: D. Checking through a different channel than the request used

   The Cyber Centre advises confirming requests through verified, out-of-band (alternate) channels.

3. Vraag 3 van 17

   You report a suspicious email to IT at work. Should you also forward it to coworkers as a warning?

   • AOnly if it has an attachment
   • BNo; follow IT's instructions and do not forward it
   • CYes, send it to as many people as possible to warn them
   • DYes, but only to your own team
   Toon antwoord

   Antwoord: B. No; follow IT's instructions and do not forward it

   The Cyber Centre says to follow your IT team's instructions and not to forward the email to coworkers.

4. Vraag 4 van 17

   What is the CAFC's online site for reporting fraud and cybercrime?

   • Acyber.gc.ca/en/guidance
   • Bgetcybersafe.gc.ca/en/secure-your-accounts
   • Creportcyberandfraud.canada.ca
   • Dcanada.ca/en/revenue-agency
   Toon antwoord

   Antwoord: C. reportcyberandfraud.canada.ca

   The CAFC directs people to report online at reportcyberandfraud.canada.ca.

5. Vraag 5 van 17

   When does the CAFC answer its toll-free reporting line?

   • A24 hours a day, every day
   • BWeekends only, 9 am to 5 pm
   • CMonday to Friday, 10 am to 4:45 pm Eastern time
   • DMonday to Friday, 8 am to 8 pm Pacific time
   Toon antwoord

   Antwoord: C. Monday to Friday, 10 am to 4:45 pm Eastern time

   The CAFC answers calls on weekdays from 10 am to 4:45 pm Eastern time and is closed on holidays.

6. Vraag 6 van 17

   Can you report a scam to the CAFC online without giving your name?

   • AOnly by phone, not online
   • BNo, you must give your SIN
   • CYes, you can report anonymously
   • DOnly if you lost more than $1,000
   Toon antwoord

   Antwoord: C. Yes, you can report anonymously

   The CAFC says you can report online anonymously.

7. Vraag 7 van 17

   In the CAFC's steps for fraud victims, what comes first?

   • APost the scammer's name on social media
   • BStay calm and gather all information about the fraud
   • CCall the scammer to demand a refund
   • DDelete every message from the scammer so it can't contact you
   Toon antwoord

   Antwoord: B. Stay calm and gather all information about the fraud

   The CAFC says to collect your thoughts and gather documents, receipts and copies of emails or texts.

8. Vraag 8 van 17

   When you report a fraud to your local police, what does the CAFC suggest you get?

   • AA file number for future reference
   • BA new Social Insurance Number
   • CA letter for your employer
   • DA refund of the money you lost
   Toon antwoord

   Antwoord: A. A file number for future reference

   A police file number helps you follow up and connect later reports to your case.

9. Vraag 9 van 17

   For identity fraud, which steps does the CAFC list along with contacting your financial institutions?

   • AChange only your social media password
   • BFlag accounts, change passwords, tell both credit bureaus
   • CClose your email account and buy a brand-new phone and SIM card
   • DWait for the scammer to contact you again
   Toon antwoord

   Antwoord: B. Flag accounts, change passwords, tell both credit bureaus

   The CAFC says to place flags on your accounts, change all passwords and report the fraud to both credit bureaus.

10. Vraag 10 van 17

    Read the situation. Who should Omar contact first, according to the CRA?

    Omar got a call from someone who said they were from the CRA. Scared, he gave his SIN and date of birth before he realized it was a scam. He did not send any money.

    • AThe CRA, which can add protections to his account
    • BThe scammer, to ask them to delete his data
    • CHis employer's payroll department
    • DNo one, since he did not lose money
    Toon antwoord

    Antwoord: A. The CRA, which can add protections to his account

    The CRA says to contact it first if you gave information to a scammer, then notify other authorities and the CAFC.

11. Vraag 11 van 17

    Read the situation. Later, Omar thinks his SIN is being misused. Which organization should he contact about that?

    Omar got a call from someone who said they were from the CRA. Scared, he gave his SIN and date of birth before he realized it was a scam. He did not send any money.

    • AService Canada
    • BThe Cyber Centre
    • CHis bank's branch manager
    • DHis mobile phone provider
    Toon antwoord

    Antwoord: A. Service Canada

    The CRA says to contact Service Canada if your Social Insurance Number was misused.

12. Vraag 12 van 17

    A caller says he works with the government and asks you to send money to help catch the scammer who robbed you in a "sting" operation. What should you know?

    • ASend a small amount first to test it
    • BPolice and the CAFC never ask you to send money
    • CIt is safe if the caller gives you a badge number
    • DThis is how police normally run fraud investigations with victims
    Toon antwoord

    Antwoord: B. Police and the CAFC never ask you to send money

    This is a recovery pitch. The CAFC says it and the police will never ask you to transfer funds or make any payment.

13. Vraag 13 van 17

    You are not sure where to report a cyber incident. Which Cyber Centre page helps both individuals and organizations find the right place?

    • AThe 7726 text reporting service
    • BThe "Report a cyber incident" page
    • CYour phone's recent calls list
    • DThe CRA's callback verification tool
    Toon antwoord

    Antwoord: B. The "Report a cyber incident" page

    The Cyber Centre's Report a cyber incident page asks whether you are an individual or an organization and shows where to report.

14. Vraag 14 van 17

    You gave your card number to an online store that now seems fake, but you are not sure. What does the Cyber Centre advise?

    • AAsk the store's chat support what happened
    • BAct quickly anyway and contact your card issuer
    • CWait until the charge appears on your next statement
    • DAct only once you are certain it was a scam
    Toon antwoord

    Antwoord: B. Act quickly anyway and contact your card issuer

    The Cyber Centre says it is important to act quickly even if you are unsure, and to ask your card issuer to cancel or reverse the charge.

15. Vraag 15 van 17

    You clicked a link in a scam message and a file downloaded. What does the Cyber Centre suggest?

    • ARestart and keep using the device as normal
    • BRun an antivirus scan, and at work tell your IT team
    • CSend the file to a friend to test it
    • DDelete the file and tell no one, since nothing happened yet
    Toon antwoord

    Antwoord: B. Run an antivirus scan, and at work tell your IT team

    The Cyber Centre suggests an antivirus scan if you clicked a link or downloaded a file; at work, report it to IT right away.

16. Vraag 16 van 17

    Why should you report a scam attempt even if you gave no information and lost no money?

    • AThe scammer must stop once you report
    • BReporting earns you a reward
    • CYou could be fined by the government if you do not report
    • DReports may help law enforcement with investigations
    Toon antwoord

    Antwoord: D. Reports may help law enforcement with investigations

    The CRA says to report attempts to the CAFC even if you gave no information, because reports may help law enforcement with their investigations.

17. Vraag 17 van 17

    Read the situation. What should Kai do?

    Kai is a payroll clerk at Riverbend Clinic. A caller who sounds exactly like the clinic director, Dr. Ana Silva, says she is at a conference and needs Kai to e-transfer $4,800 to a new medical supplier today.

    Clinic policy: rush payments and new payees need a call-back to the number in the staff directory and a second manager's approval.

    • ASend half now and the rest after the conference
    • BCall back on the directory number and get a second approval
    • CSend it, since the voice clearly belongs to Dr. Silva and she is the boss
    • DAsk the caller to email the request instead
    Toon antwoord

    Antwoord: B. Call back on the directory number and get a second approval

    A familiar voice can be cloned. The Cyber Centre advises clear phone verification processes and calling back on a known number.

Toetsenbord: 1–4 om te antwoorden, Enter voor de volgende vraag.