Phishing
A story
Pierre, 55, gets a text on a Friday evening: “Withdrawal of 0.41 BTC requested from a new device. If this wasn't you, cancel here.” The link leads to a site that looks exactly like his platform's. He enters his email and password. The page says: “Enter the code you received by text.” He does.
The code really is from his platform. What Pierre doesn't know is that someone on the other side had just logged in to his account with the password he'd just typed, and was waiting for that code. In fifteen minutes the account is emptied. The “cancellation” site no longer loads.
A fictional story inspired by real cases. Names and details are invented.
How it works
Message
An email or text imitates your crypto platform, bank or Canada Post: locked account, suspicious withdrawal, refund or parcel waiting.
Fake site
The link leads to a copy of the real site, with a slightly different address.
Stolen login details
The password and verification code you enter on the fake site can be used immediately by the scammers to log in to your real account.
Withdrawal
Funds are withdrawn to addresses controlled by the scammers. Crypto transfers can't be reversed.
The warning signs
- An urgent message: locked account, suspicious withdrawal, refund to claim
- A link in a text or email
- A site address that is almost the same as the real one, with a small difference
- A page asking for your password and a verification code
- A sender or number that doesn't match the organization
If it happens to you
- If you clicked: change your password from the official app and contact the platform and your bank.
- Open your app or a bookmark rather than a link you received.
- Use two-factor authentication (2FA) with an authenticator app or security key rather than text messages.
- Turn on a list of approved withdrawal addresses if your platform offers one.
- Report the message to the Canadian Anti-Fraud Centre (1-888-495-8501).
Official contacts → · Your platform's help page →
Have you already sent money?
Don't send anything else, even to “unlock” your funds. Here's how to protect what's left and report the fraud.
Start my action plan →