CIBC Mellon Legal and Regulatory Matters
Incidents of identity theft and fraud continue to rise. To protect yourself, please proceed with caution when divulging personal or financial information to any third party.
If you receive a letter requesting payment of funds or personal information, please confirm the sender is a legitimate organization and the information requested is for legitimate purpose.
Clear your browser's cache
If you use a public or shared computer to access CIBC Mellon's websites and applications, it is vital that you sign out when you are finished. Once you have signed out, you should delete the browser's cache. The cache maintains a copy of web pages that have been viewed recently.
E-mail fraud (Phishing)
What is phishing?
"Phishing" or "brand spoofing" is the act of sending an e-mail to a user falsely claiming to be a legitimate enterprise in an attempt to scam the user into disclosing private information. Government, financial institutions and online auctions/pay services are common targets of brand spoofing.”
How does phishing work?
Phishing e-mails are often sent out as spam to numerous recipients and appear to come from legitimate businesses, sometimes even duplicating legitimate logos and text. Within the message, you may be requested to click on a link that takes you to a fraudulent site or pop up window where you are asked to submit personal and financial information. Messages may imply a sense of urgency or immediate risk to bank accounts or credit cards if you fail to answer, increasing the chances of a response. Special offers and prizes may also be promoted as incentives.
What do phishers do with information?
Phishers can access your accounts using your passwords and other information to wire funds, withdraw money or make purchases. Personal information can also be used by phishers to open new bank or credit card accounts in someone else’s name.
What should I look for in a valid message from CIBC Mellon?
CIBC Mellon will never request that you log on to our systems through a link provided within an email directly. Website access should be provided by typing www.cibcmellon.com directly into your browser window.
How can you verify an e-mail?
If you ever doubt the legitimacy of any e-mail claiming to originate from CIBC Mellon, please call or contact CIBC Mellon at: Corporate.Security@CIBCMellon.com
What you can do
There are lots of sources on the internet to help you look up and gain a better understanding of phishing. One recommended link is: RCMP - E-mail Fraud / Phishing.
Also, Canada's Department of Public Safety and Emergency Preparedness and the United States Department of Justice recommend these three steps to defend against phishing schemes: Recognize it, report it and stop it.
Throughout North America, there has been an increase in fraudulent mailed, e-mailed and faxed letters sent to consumers and businesses informing recipients of large lottery winnings or concerning a "request for urgent business transaction."
The scheme, now increasingly carried out via e-mail according to the Canadian Anti-fraud Centre (CAFC), begins once a consumer receives a letter.
You should be wary of any e-mail, mail or fax you receive if it carries any of the following themes that often appear in fraudulent letters. These letters often:
- Emphasize the urgency and confidentiality of a transaction.
- Stress the importance of trust and honesty in order to make the reader believe there is validity to the letter.
- Refer to known corporations with good reputations to increase the air of legitimacy to the transaction in question. For instance, the writers of these letters will commonly claim to be a doctor and/or a corporate entity with a major foreign corporation. There may also be some mention of government involvement.
If you respond to these letters, unknowingly requesting more information, the writer of the letter will normally ask for an upfront processing fee or false tax payment. In some cases, there will be a request to arrange a meeting to discuss the transfer of funds to complete the scheme.
CIBC Mellon does not participate in lottery programs or send requests for payment or cheques purporting to be an advance on lottery winning. If you are uncertain if a payment is legitimate, please e-mail Corporate.Security@CIBCMellon.com or contact us using our secure online inquiry form.
If you receive spam e-mails of this nature, do not open the message. You can visit the Canadian Anti-Fraud Centre to learn more.