Scotiabank is committed to providing customers with a secure and protected banking and brokerage environment. Learn about what we do and how you can protect yourself. 



Get In Touch

Security

Scotia OnLine Security Guarantee logoOnline Security Guarantee

We will fully reimburse you in the unlikely event that you suffer direct financial losses due to unauthorized activity1 in your accounts through Scotia OnLine Financial Services2 provided you have met your security responsibilities.

1 “Unauthorized activity” means a transaction that was carried out in your Scotiabank account through Scotia OnLine without your permission, authorization or knowledge and where it can be established that you are a victim of fraud, theft or coercion.

2 “Accounts” include all accounts that are accessible through Scotia OnLine.

Safe Computing Practices
It is important that you take steps to protect your information on your personal computer. Scotia OnLine® Financial Services is a protected environment which meets the highest Internet security standards. While we take strong measures to ensure the security of your financial transactions and the confidentiality of your information, it is extremely important that you also take precautions to ensure that your information remains safe and secure.

General Security Practices
You play a role in protecting the security of your personal information. In addition to following Safe Computing Practices, here are some other best practices that can help you keep your information secure.

Do

  • Stay informed and follow any new security practices that may emerge over time.
  • Protect your PIN and Passwords: (online, phone, ABM, direct payment, wireless). Keeping your PIN and passwords secure is the key to keeping your money safe.
  • Memorize your PIN (Personal Identification Number) and TeleScotia and Scotia OnLine passwords.
  • Choose PIN/passwords that cannot be guessed by others and do not write them down.
  • Be discriminating. Be sure who you’re dealing with and don’t give out your personal information freely.
  • Find out why it’s needed and how it will be used, and then determine if it’s relevant to provide. Do not give out personal information on the phone, through the mail or over the Internet unless you have initiated the contact or know with whom you are dealing.
  • Destroy old and expired bank and credit cards.
  • Shred documents that contain personal information (i.e., bank statements).
  • Destroy carbons and receipts that may contain account numbers and/or signatures.
  • Tear up or shred any pre-approved credit card offers to which you do not respond.
  • Protect your Social Insurance Number and those of your children and other family members by not carrying them in you wallet.
  • Keep a list of all your card numbers and ID in a safe place.
  • Minimize the identification information and number of cards that you carry.
  • Do not carry your Social Insurance card, passport or birth certificate unless needed that day.
  • Report lost or stolen cheques, credit or debit cards immediately.
  • Notify your bank or the police of suspicious activity.
  • Store cancelled cheques, chequebooks and account statements in a safe place.
  • Retrieve and review your mail promptly.
  • Review your credit report at least once every year. Make sure all information is up-to-date and accurate.
  • Review your bank account and credit card statements promptly.
  • Know when to expect them and inquire with the bank/company if you do not receive them when expected (within a reasonable amount of time).
  • Sign the back of any new cards (both credit and debit cards) as soon as you get them as well as activate new credit cards immediately if the feature is offered.
  • If you use your VISA card online, register for Verified by VISA, a free service that provides an extra layer of protection and guards against unauthorized use online.
  • Educate your children about sharing personal information.
  • Follow Safe Computing Practices.

Don’t

  • Don’t respond to unsolicited emails that request personal information such as your banking card number, ABM PIN, online/telephone banking passwords, credit card numbers etc.
  • Do not leave your bank and credit cards unattended and do not let them out of your sight when making a purchase.
  • Never leave cards unattended at work (the workplace is a common place for theft).
  • Don’t email confidential information such as account numbers, date of birth, etc.
  • Do not leave personal information (bank statements) lying around.

ScotiaVerify
As part of our ongoing commitment to protecting you from identity theft and fraud, we are introducing ScotiaVerify™, an extra layer of security to further authenticate your identity when you sign on to Scotia OnLine. This added security feature will further minimize the risk of potential unauthorized access to your personal and financial information.

If you already use Scotia OnLine, it will only take a few minutes to set up your security questions and answers. Over the upcoming months, here’s what you can expect when you sign-on to Scotia OnLine during enrollment.

First Step:
Choose five security questions from the drop down menu and enter your response to each of these questions.

Second Step:
Register the computer you are using to access Scotia OnLine. This step is optional, but Scotiabank recommends that Scotia OnLine users register the computer that they use regularly (e.g., at work or home) to sign-on. All new customers will be asked to set up their security questions and answers when they initially activate their access to Scotia OnLine for the first time.

When will I be asked to answer the security questions I’ve set up?

If in the future, the computer that you are using to sign on to Scotia OnLine is not registered with us, then you will be asked the security questions that you selected during enrollment.

Important Security Information:
Always keep your security questions and answers confidential – don’t share them with anyone.
Scotiabank will never ask you to confirm these questions or answers by telephone, fax or email.

Identity Theft
Identity theft is the use of someone’s personal information without their knowledge or consent to commit a crime such as fraud or theft. Identity theft can start whenever a criminal gets access to someone else’s information, and it is one of the fastest-growing crimes in Canada.

Protect Yourself and Minimize the Risk

There are important steps you should take to protect your information.

Follow Safe Computing Practices to protect your information online.
Follow General Security Practices to protect your information in other ways.
Learn about how to identify and avoid Phishing Scams.

Know that Scotiabank will never present you with unexpected webpages or send you unsolicited emails asking for your password, Personal Identification Number (PIN), credit card, account numbers, etc.

Report any suspicious requests to Scotiabank immediately.

Do not respond to unsolicited emails or websites that request personal information.

What to Do If it Happens to You

If you believe that you are a victim of identity theft and you are a Scotiabank customer, please contact your branch or call 1-800-4-SCOTIA (1-800-472-6842) immediately. Contact each financial institution, credit card issuer or other company that provided the identity thief with unauthorized credit, money, goods or services.
Contact both of Canada’s national credit reporting agencies, Trans Union Canada and Equifax Canada. Ask each agency to send you a copy of your credit report, and discuss with them whether you should have a fraud alert placed on your file.
Report the incident to your local police department.
Report the incident to PhoneBusters, a national anti-fraud call centre jointly operated by the Ontario Provincial Police and the Royal Canadian Mounted Police, which has a mandate to gather information and intelligence about identity theft, and will provide advice and assistance to identity theft victims. You can call PhoneBusters toll-free at 1-888-495-8501.
If your government-issued documents were lost or stolen, report them to the responsible ministry or department and request new documents.

Identity Theft Statement

The Identity Theft Statement is a form that you can use to notify financial institutions, credit card issuers and other companies that you have become a victim of identity theft. It also allows you to provide information that may be needed for an investigation of the incident.

Scotiabank and many other Canadian financial institutions accept the Identity Theft Statement. The statement and instructions are available at the Consumer Measures Committee website at www.cmcweb.ca.

Phishing Scams

“Phishing” is a type of identity theft where criminals use email to try to bait you into fake websites. Once there, you are asked to disclose confidential financial and personal information, like passwords, credit card numbers, access codes or Social Insurance Numbers. The most familiar type of phishing scam is an e-mail threatening serious consequences if you do not log in and take action immediately.

July 16, 2007 Update:
Never respond to emails, open attachments, or click on suspicious links from reputable institutions or unknown senders asking for personal or financial information.

Always remember that Scotiabank will never send you unsolicited emails asking for confidential information, such as your password, PIN, Access Code, credit card and account numbers. We will never ask you to validate or restore your account access through email or pop-up windows.

If you have entered personal information after clicking on a link or suspect fraudulent behavior, please call us immediately at 1-800-4-SCOTIA (1-800-472-6842).

Recognise it!

Some emails look authentic, featuring corporate logos and layouts similar to the ones used by institutions for legitimate communication. Because these emails can look so official, unsuspecting recipients may reply to them, resulting in financial losses, identity theft and other fraudulent activity.

You should never respond to or action any email that:

  • Requires you to enter personal information directly into the e-mail or submit that information online.
  • Threatens to close or suspend your accounts if you do not provide or verify personal information.
  • Claims that your account has been compromised or that there has been fraudulent activity on your account and requests you to enter, validate or verify your account information.
  • States that there are unauthorized charges on your account and requests your account information.
  • Claims that the bank has lost important security information and needs you to update your information online.
  • Asks you to enter your card number, password, access code or account numbers into an email, pop-up window, form or non-secure webpage.
  • Asks you to confirm, validate, verify, or refresh your account, credit card, or financial information.

Stay Alert – Preventative Measures

  • Be suspicious of all unsolicited or unexpected emails you receive, even if they appear to originate from a trusted source like Scotiabank.
  • Never click on a link in an email or pop-up window to go to a site. Type, or cut and paste, the URL into a new web browser window.
  • Type in the Scotiabank web address yourself to ensure you are transacting with our server. You can also bookmark the URL to save time.
  • Never call a number appearing on an email you suspect is fraudulent. In a new twist, phishing scams use a phony telephone number in the email. When you call, a person or an automated response asks for your personal and/or account information.
  • If you do have a relationship with the company mentioned in the email, call the company on the telephone using a reputable source like your statement or the phonebook for the phone number.
  • Stay current. Read and follow Safe Computing Practices on a regular basis.
    What to Do About Phishing Emails?

If you have received a fraudulent email, please forward it to phishing@scotiabank.com. Please do not remove the original subject line, or change the email in any way when you forward it to us. If you have entered personal information after clicking on a link or suspect fraudulent behavior, please call us immediately at 1-800-4-SCOTIA (1-800-472-6842).