Fraud awareness

Don't fall for fraudsters pretending to be First National Financial

Fraudsters are becoming increasingly sophisticated and use a variety of tactics to trick you into sharing personal information about yourself, such as impersonating First National Financial LP (“First National”) by using our company logo and creating fake websites, spoofing phone numbers, sending fraudulent emails, text messages and social media advertisements.

This page will help you understand:

  • Different fraud schemes and current fraud alerts
  • Best practices for safe and how to identify unsecured networks and websites.
  • Be aware of unsolicited emails, text messages or phone calls that ask for personal information.
  • Recognize that fraudsters may use AI tools to generate highly convincing audio, video and images to impersonate real individuals or create entirely fake identities that are difficult to detect.
  • How to report suspicious activity to us.

Select a topic

Common types of fraud social media and online advertisement fraud

  • Email, Website and Social Media Fraud
  • Spoofing and Impersonation Fraud
  • Phishing and Quishing
  • AI-enabled scams

Current fraud alerts First National Financial is aware about

Account verification fraud

Fraudsters may distribute letters, emails or text messages claiming that a mortgage is under review or that your account verification is required. These communications often include fraudulent contact information and request personal or financial details.

Before responding, verify all communications directly with First National by using the contact information. This information is available on our official website.

Fake mortgage payment requests

Fraudsters may impersonate mortgage professionals and contact borrowers requesting immediate payments or updated banking information relating to your mortgage payment(s). The fraudster may claim that payment is overdue, an account of yours is at risk, or special arrangements are required to bring the account up to date.

First National will never request sensitive information through unsolicited communications to you.

Wire transfer and closing fraud

Homebuyers may receive fraudulent emails advising that banking details for a home purchase or mortgage closing have changed. These messages often appear legitimate and may closely resemble communications from lenders, lawyers, or mortgage professionals.

Always verify payment instructions directly with your mortgage professional or legal representative using trusted contact information.

Fake mortgage rates and refinancing offers

Fraudsters may advertise exceptionally low rates, guaranteed mortgage approvals, debt consolidation programs, or refinancing opportunities. Their goal is often to collect personal information, identification documents, or advance fees.

Be cautious of offers that appear too good to be true.

Social media and online advertisement fraud

A variety of social media advertisements may promote:

  • Free mortgage consultations
  • Mortgage payment relief requests
  • Debt consolidation services
  • Exclusive mortgage rebates

These advertisements may direct consumers to fraudulent websites designed to collect personal information. We recommend not to engage with suspicious advertisements, emails, websites, or communications claiming to represent First National without verification.

Email, website and social media fraud

Fraudsters increasingly use digital channels, including email, websites, search engine listings, social media platforms, and text messaging to target consumers.

Some fraudsters place sponsored advertisements in search results that imitate legitimate mortgage companies and direct users to fraudulent websites or phone numbers.

Spoofing and impersonation fraud

Fraudsters may impersonate First National, one of our employees, or other trusted professional involved in your mortgage transaction (such as lawyer, real estate agent or mortgage broker).

This practice is known as spoofing where a fraudster appears to be communicating from a legitimate source, such as:

  • Using email addresses that closely resemble a legitimate company email address.
  • Creating a website that looks similar to an official company website.
  • Using caller ID technology to make a phone number appear legitimate.
  • Copying company logos, branding and signature lines in an email.
  • Altering characters in an email address or web address to resemble an official email address. Examples: (these differences can be difficult to spot)
    • Legitimate: Investigations@firstnational.ca
    • Fraudulent: Investigations@fristnational.ca (misspelling – always verify the email address carefully)
    • Legitimate: www.firstnational.ca
    • Fraudulent: www.firstnationals.ca (misspelled domain– always verify the website address carefully)

Always verify unexpected requests for personal information, payment instructions, banking changes or document submissions by validating the request through a known and trusted phone number or email address.

Phishing and QR-code phishing (quishing)

Phishing: Fraudsters may send emails, text messages (smishing), or phone calls (vishing) that appear to come from trusted organizations. These communications often attempt to trick individuals into clicking malicious links, opening attachments, disclosing sensitive information, or providing login credentials.

Always verify unexpected and unusual requests. Refer to section 'How to Identify Suspicious Emails or Text Messages' for more tips and information.

Quishing: Fraudsters may use malicious QR codes in emails, text messages, letters, advertisements, or social media posts to redirect users to fraudulent websites designed to steal personal information or credentials.

Always verify the source before scanning a random QR code.

Artificial Intelligence (“AI”) enabled scams

AI-Generated Scams - advances in artificial intelligence have made fraudulent emails, messages, and documents more convincing and professional-looking. Users should focus on the nature of the request rather than relying solely on spelling, grammar, branding, or formatting as indicators of legitimacy.

How to identify suspicious emails or text messages

Be cautious if:

  • The message comes from an unfamiliar email address or phone number.
  • The message uses a generic greeting such as "Dear Customer," or “Hello”.
  • The message requests personal or financial information.
  • There are spelling, grammar or formatting errors in the communication.
  • The message creates urgency and pressures you to act immediately.
  • The sender of the message requests passwords, verification codes, wire transfers or account credentials.
  • The message contains suspicious links or attachments.
  • The message asks you to click a link and sign in with your credentials.
  • The message comes from a look-alike domain.
  • Examples:
    • Legitimate: https://www.firstnational.ca
    • Fraudulent: www.firstnationals.ca (misspelled domain and not a secure site– always verify the website address carefully
    • Legitimate: https://mymortgage.firstnational.ca/
    • Fraudulent: http://www.firstnationa1.ca (misspelled domain and not a secure site – always verify the website address carefully

If you are uncertain whether a First National communication is legitimate, do not click any links. Contact us directly using verified contact information.

Suspect fraud?

Step 1: Stop and verify

Fraudsters often use fear, urgency, or attractive offers to manipulate victims into sharing personal and financial information. Take a moment to slow down if you feel pressured.

First National will never request banking credentials, passwords or verification codes through unsolicited emails, text messages, or phone calls.

Step 2: Report suspected fraud

If you feel physically threatened, contact local police immediately.

If you receive an email, text message, phone call, website link, social media advertisement, or communication that you suspect is fraudulent and not from First National, report it to us by email.

When reporting suspicious emails, forwarding the original message as an attachment can help us with our investigation efforts.

If you believe you have shared information with a fraudster and may be a victim of fraud, we recommend the following actions:

  • Contact your financial institution immediately to notify them.
  • Monitor your accounts and transactions for suspicious activity.
  • Consider placing a fraud alert on your credit file with Equifax or TransUnion.
  • Contact the Canadian Anti-Fraud Centre's toll-free line at 1.888.495.8501 to report the incident and to track the latest data on fraud in Canada.

Step 3: Concerned about your mortgage account?

If you have any fraud concerns regarding your mortgage account, application, payments, or communications you've received, contact First National using verified contact details from our website.

Phone: 1-888-488-0794

How does First National help protect you from fraud?

We actively monitors and investigates suspected fraud involving email, phone, text message, social media and other communication channels. First National is committed to working with industry partners, financial institutions, cybersecurity professionals and law enforcement agencies to help identify and prevent fraudulent activity.

Our employees and authorized representatives:

  • Follow strict privacy controls for authorization and security validation.
  • Will never demand immediate payment through unusual methods.
  • Will never request your passwords or credentials.
  • Will never pressure clients into providing sensitive information.

Stay informed and vigilant

Fraud tactics continue to evolve as fraudsters become more sophisticated. We encourage the following best practices to protect yourself:

  • Follow our official communication channels.
  • Review fraud alerts and prevention resources.
  • Report suspicious activity on your accounts immediately to local law enforcement, your financial institutions and the Canadian Anti-Fraud Centre.
  • Never share your personal information online or to someone you do not know (such as Social Insurance Number, banking information, passwords or verification codes).
  • Never click on links or scan QR codes from unknown or suspicious sources.
  • Avoid relying on contact information provided in unsolicited communications.
  • Upon completion of an online transaction, sign out of the website and clear your browser's cookies and cache.
  • Refrain from using the same password or reusing an old password. Do not share your passwords.
  • Visit our official website directly by typing the URL into your browser.
Together, we can help prevent fraud and protect your financial future.