ICBC is warning customers to delete any text messages purporting to be sent from ICBC, after a number of customers reported to have received these texts over the last 24 hours.
The text messages tell the receiver they’ve been sent a refund for a traffic fine or red light ticket and provides a link to claim the money. The link directs the user to a site where they have to enter personal banking information.
Called SMiShing, short for SMS phishing, this scam could trick a user to unknowingly download malware onto their mobile device or send personal information directly to the attacker.
ICBC stresses it does not use unsecure channels, like text messaging or social media, to communicate sensitive information to its customers. Furthermore, ICBC does not issue refunds via text message or Interac e-transfer.
In most cases, reading the text shouldn’t cause harm to one’s mobile device but customers should delete the text immediately and not click on any links.
Customers that have received this text are encouraged to report this through their local police (non-emergency line) and the Government of Canada’s Canadian Anti-Fraud Centre at 1-888-495-8501.
ICBC says it is in no way involved with this incident other than being named in the messages, and has confirmed that all its information systems have not been compromised.
Tips to avoid being victim of SMiShing
Don’t click links within text messages, especially if it’s sent from someone you don’t know. But also be aware that sometimes a scam text could also come from someone you do know.
Don’t respond to texts that ask for private or financial information.
If you get a message that appears to be from ICBC or another institution you regularly do business with, contact the business directly to confirm they sent you a message. ICBC’s customer service line is 1-800-663-3051.
Never reply to a suspicious text message without doing your research and verifying the source.
Never call a phone number from an unknown texter.
Common sense is your best protection against fraud. If it sounds too good to be true, it probably is.