Cyber Insights: Cyber Security Awareness Month

Cyber Security Awareness Month is here, and scammers haven't taken the year off. Fraud attempts keep getting more convincing, from texts that look like they came from your financial institution to phone calls that sound urgent and official. Artificial intelligence is making some of these scams even harder to recognize.

The good news is that your best defence is still you. Taking a moment to stop, think and verify an unexpected request can make a big difference.

To mark Cyber Security Awareness Month, we sat down with Darin Winder, Vision's Senior Manager, Information Technology. Darin has spent more than 30 years behind the scenes keeping Vision's systems secure. Here, he explains how we work to protect members' personal and financial information and what you can do to help keep yourself, your family and your business safer online.

Why is cyber security so important for Vision and its members?

At Vision, protecting members' personal and financial information is a top priority. Information such as account details and other personal information can be valuable to criminals and may be used to commit fraud or identity theft.



Cyber security is also about ensuring the systems and services our members rely on remain available and secure. By protecting information, maintaining our systems and preparing for potential incidents, we can help reduce cyber risks and continue earning the trust our members place in us.

Cyber security is a shared responsibility. We also want to help members recognize potential threats and make safer choices when they're online.

Cyber security works best in layers. Vision uses multiple layers of administrative and technical safeguards designed to protect member information. These measures include controls around access, authentication, information protection, employee awareness and incident response, and are reviewed as risks and technology evolve.

Our employees also receive training to help them recognize potential threats and respond appropriately. Protecting member information isn't a one-time activity. It's something we work at every day.

Phishing remains one of the most common threats. Fraudsters may use email, text messages, social media, phone calls or fake websites to impersonate an organization or individual you trust. Their goal may be to convince you to click a link, scan a QR code, download an attachment, provide sensitive information or send money.

Malware is another threat. Malicious software can infect a device and potentially steal information or interfere with how the device operates. Ransomware can prevent individuals or organizations from accessing systems or data. Modern ransomware attacks may also involve stealing information and threatening to release it, whether or not the information has been encrypted.

Scammers are also using artificial intelligence to create more convincing emails, text messages, voices, images and videos. A message may sound professional, contain personal details or appear to come from someone you know, but that doesn't prove it's genuine.



If an unexpected request involves money, account access or personal information, pause and verify it using contact information you already know and trust.

Fraudsters often take advantage of familiarity and trust by impersonating people and organizations we know, such as family members, local businesses, suppliers, government agencies or financial institutions.



They may also try to create a sense of urgency, telling you that an account has been compromised, a family member needs immediate help or money must be sent right away.

Regardless of the story, the safest response to an unexpected or unusual request is to pause and verify it independently. Contact the person or organization using a phone number or other contact information you already know and trust rather than information provided in the unexpected message.

Start with one simple habit: pause before you act.

Scammers often create a sense of urgency. They may tell you that your account has been compromised, that you need to send money immediately or that something bad will happen if you don't respond. That urgency is designed to make you react before you have time to think.

Before clicking a link, scanning a QR code, providing information or sending money, ask yourself:

• Was I expecting this message or request?
• Does the request make sense?
• Am I being pressured to act immediately?
• Can I verify the request another way?

If you're unsure, don't use the phone number or link included in the message. Instead, contact the person or organization directly using contact information you already know or obtain from its official website.

One of the biggest is reusing the same password across several accounts. If that password is compromised, criminals may try it on other services.

Use a long, unique password or passphrase for each important account. A reputable password manager can make it easier to generate and store different credentials.

Turn on multi-factor authentication (MFA) whenever it's available, particularly for important accounts such as email and financial services.

Other good habits include:

• Keeping your computer, smartphone, web browser and apps up to date.
• Backing up important information.
• Avoid conducting sensitive transactions on public or shared devices, and use trusted networks whenever possible.
• Being cautious about unexpected links, attachments and QR codes.

Be especially cautious about an unexpected communication asking for a password, personal identification number, one-time passcode, account information or other sensitive details.

Never read or send a one-time passcode, verification code or authentication code to someone who unexpectedly contacts you, even if they claim to be from Vision or another organization you trust.

Don't assume a communication is legitimate simply because:

• The caller ID or sender name says 'Vision Credit Union.'
• The phone number looks familiar.
• The person already knows something about you or your account.
• The email or text looks professional and has no spelling mistakes.
• The caller sounds convincing.

If you're ever unsure about a communication claiming to come from Vision, end the interaction and contact your local branch using a phone number you know or obtain from Vision's official website. You can also email contactus@visioncu.ca.

Act quickly, but don't panic.

If you believe you've shared banking information, a password, verification code or other sensitive information with a scammer, contact your Vision branch as soon as possible using trusted contact information.

Change passwords for accounts you believe may have been compromised, using a trusted device, and avoid reusing the new password on other accounts. Review your accounts for activity you don't recognize.

If you believe you've been a victim of fraud or cybercrime, you can also report the incident to local police and the Canadian Anti-Fraud Centre.

Scams will continue to evolve, and technology such as AI will make some of them increasingly difficult to recognize. But you don't need to be a cyber security expert to protect yourself.

Pause. Think. Verify.

Before you click a link, share information, provide a verification code or send money, take a moment to make sure the request is legitimate. Talk with family and friends about the scams you encounter, and if something doesn't feel right, contact your local Vision branch.