If there’s one thing we’ve learned as technology marches forward—from phone calls to email and text—it’s that fraudsters will always find inventive ways to keep up.

But even as we move to more sophisticated means of communication and security, there are still some basic things that posers do when it comes to bank fraud—and many are summed up in this short article and handy infographic.

For instance, fraudulent emails often arrive dressed in your bank’s brand colours and logo asking for account numbers and PINs or birthdates. It’s easy to think these queries are legit—you might even recall discussing this information with your bank at some point. But here’s the key difference: it was probably when you called them. Your bank would not reach out to you to verify these things.

Give this list a quick gander, and keep the list of what to watch for nearby. And when in doubt, shut them out.

1. Account number, Debit card number, or PIN

Your bank won’t ask for this by text or email. Ever.

2. Usernames or passwords

Don’t tell anyone this information, including family members, even in person.

3. Social Insurance Number (SIN)

In fact, don’t even carry it in your wallet.

4. Credit card number or the CVV number on the back of the card

Your bank won’t ever need you to verify this information.

5. Birthday or address

Your bank has this information, but for your protection and to confirm your identity, you may be asked to
verify your address or birthday when you call them.