Don’t allow impersonation scams to steal your assets

Learn how impersonation scams work and ways to protect your money.

Start your claim

How do impersonation scams work?

An impersonation scam occurs when someone poses as a trusted entity to convince you to give money or sensitive details. They might impersonate a government agency, bank, or delivery service. There have even been instances where scammers pretended to be close friends or family members.

How impersonation scams start

Typically, someone posing as a trusted entity, like a bank, police officer, or close friend, will contact you.

How scammers get in touch

These scams typically start with a phone call, text, message, or email. They might also reach out via social media by sending messages or posting content.

How scammers obtain your money

Scammers frequently create a sense of urgency, promote fake investments, or warn that your account is in danger. They might request that you send cryptocurrency to a ‘secure’ wallet or pay fees to confirm a bogus transaction.

Ways to recognize an impersonation scam

Requesting money or sensitive security details

Reliable organisations such as your bank or the police will never request that you send money or disclose sensitive details. If a message seems odd or unexpected, always confirm its authenticity with the organisation first.

Pressure methods

Scammers frequently pressure you to respond right away. Their messages often contain a ‘hook’ to capture your attention. For instance, they might claim your money is in danger and urge you to act fast to protect it.

Spelling mistakes

Genuine organisations typically don’t make grammar or spelling errors in their communications. Be cautious of messages that appear unusual or contain suspicious links.

FAQs

  • How to identify impersonation scams

    Impersonation scams share many warning signs with other types of investment fraud. A major indicator is the urgency the scammer creates, making you believe the money is urgently needed. If they claim to be someone you know or recently dealt with, you might notice clues that they’re not who they claim to be.

    Another red flag is when they try to rush or frighten you into sending money—perhaps by saying they’re in trouble and need funds to resolve it, or threatening to cancel a service if you don’t pay.

    Sometimes, impersonators pretend to be a friend or family member. In such cases, watch for two signs: Are calls or messages coming from an unfamiliar number? If so, contact the person they claim to be. If they deny contacting you, it’s likely an impersonation scam.

  • How to respond once you detect an impersonation scam

    If you identify an impersonation scam before losing any money, it’s still crucial to report it. You should inform the National Cyber Security Centre so they can take appropriate action. Additionally, alert the real person or organisation being impersonated, so they can strengthen their security measures.

  • How can I report a website impersonation?

    If you find a website copying a legitimate one to steal personal data, you can report it. Google Safe Browsing lets users flag suspicious sites. Just fill out the form provided by Google to report the page. When you submit, some of your account and system information will be shared with Google for review.

  • Which laws must social media platforms follow regarding impersonation?

    In the Canada, pretending to be someone else to unlawfully obtain money, goods, or services is a criminal offence under the Fraud Act 2006. Social media platforms must take down content that breaks these laws when reported and work with law enforcement during investigations.

  • Are catfishing and impersonation the same?

    Not exactly. Catfishing means creating a fake online identity, usually on social media or dating sites, to trick someone. It’s often used to form false romantic connections or to carry out financial scams. While catfishing can include impersonation, it mainly involves inventing a new persona rather than pretending to be an actual individual or organisation.

  • How does online impersonation differ from identity theft?

    Online impersonation is when someone pretends to be another person or organisation to trick others, usually for financial benefit or to obtain sensitive data. Identity theft happens when a person steals your private information—like your National Insurance number or bank details—to act as you in financial or other matters. While both involve deceit, identity theft generally requires stealing personal details, whereas online impersonation can happen without having direct access to your private information.