Smartphone Security and Privacy

Your smartphone security can be improved in various ways, such as setting up strong passcodes or using biometric authentication methods. In this webinar, our teen tech mentor discusses the importance of keeping your operating systems and apps up to date to protect against potential threats, as well as location sharing and data access, to teach you how to safeguard your personal information and maintain a high level of privacy on your smartphones.

Protecting Your Privacy with VPNs

A Virtual Private Network (VPN) is a digital tool that provides a secure and private connection between a device and the internet. In this webinar, our teen tech mentor teaches you how virtual private networks (VPNs) can help you protect your online privacy and security while traveling, especially when you’re using public Wi-Fi networks.

How to Hack Proof Your Passwords

Passwords are your first line of defence when it comes to online safety. By creating and using strong passwords, you greatly enhance your online safety and reduce the risk of falling victim to cyberattacks or identity theft.

It’s Tax Time! How to avoid scams and identity theft before the filing deadline

In 2022, the U.S. Internal Revenue Service (IRS) identified nearly $6 billion in tax fraud, with more than 100,000 employment or tax-related identity theft reports to the U.S. Federal Trade Commission (FTC). And according to the Canadian Anti-Fraud Centre, reports of scams and phishing emails and text messages impersonating Canadian Revenue Agency (CRA) doubled between 2021 and 2022. 

So what is tax fraud?  It can involve someone impersonating the government, impersonating you, or impersonating a legitimate tax preparer. The motive could be different every time – they may be looking to steal your tax return, your information for identity theft, or to intimidate you into paying them immediately by threatening you and pretending to be the IRS or CRA asking for payment. 

Criminals need very little personal data to steal your identity, file taxes in your name or steal your money — your name, SSN or SIN, birthday and address may be all it takes. 

Common types of tax fraud include:

  1. Someone claiming to be from the IRS, CRA or state/provincial tax agency contacts you via email, phone, text or even social media message.
  • They may try to steal your personal private info to commit identity theft or to submit your taxes and steal your refund.
  • Or, they may try to steal your money by convincing you to share banking info, credit card info, or spoofing legitimate tax websites
  1. Someone claiming to be a verified tax preparer – but they’re scammers.
  • A fraudulent tax preparer could steal your return or identity.
  • Many of these scammers will offer to file your taxes for free or at a massive discount.

Here is how a tax scam typically works: 

  1. It starts with contact from someone impersonating the IRS, CRA or other tax agency. In most cases, targets are contacted by phone, email, text or even on social media by someone claiming to be from the IRS. 
  2. Once they get your attention, they tell you something is wrong, like that your personal info needs to be updated or verified, or you are owed more money, you owe the government money, your SSN/SIN has been suspended or canceled, etc. 
  3. Then, they make an ask. This could be a request for you to “verify” your SSN or SIN, to submit another tax form with more personal info, to make a payment, to share your credit card or bank account or direct deposit info, or click a link where they have asked you to enter information for them to steal. 
  4. Alternatively, some scammers will pretend to be tax preparers, offering to submit your taxes for free or at massive discounts, only to steal your info or money. Even certified tax professionals may abuse their positions to file false claims in your name. That’s why it is important to thoroughly vet any tax preparer, and be especially cautious if a tax preparer refuses to sign your return. The IRS and CRA both have resources to help you find reputable tax preparers.

Unsolicited communications are a common thread in tax scams. It is important to know that tax agencies will typically communicate by mail. Even if your caller ID or your email says IRS or CRA, these can be spoofed, and you should call the number listed on the government agency’s official website, which you find via a Google search (vs. visiting a link within the unsolicited communication) to confirm the truth.

Red flags of tax scams include any of the following:

  • They contact you over email, text, or social media message. The IRS and CRA do not communicate with taxpayers using unsolicited emails, text messages, or over social media. The IRS will typically contact you via snail mail. 
  • You get a recorded phone message. There are some instances in which the IRS will call a taxpayer — typically after sending multiple letters in the mail. But it will always be a human on the other end of the line. Any prerecorded or automated message is a scam.
  • They tell you to pay through untraceable, unofficial channels. The IRS and CRA offer several payment methods, including paying at IRS.gov and canada.ca. If a caller says you cannot pay through official channels, or is asking you for an untraceable form of payment (e.g. gift card, cryptocurrency, wire transfer, Venmo, etc.), you know it’s a scam.
  • They tell you to make the check out to the “IRS” or to the “CRA.” The IRS requests all checks be made out to “U.S. Treasury,” and the CRA requires checks to be payable to the “Receiver General for Canada.” Scammers can change “IRS” to “MRS” and add the last name of their choosing.
  • They want you to share details about your credit card or bank. Legitimate tax agencies will never request login information for your online or financial accounts. If anyone calls asking for credit or debit card details, account login information, or bank account numbers, they’re not from the IRS or CRA.
  • They threaten you with arrest or deportation. The IRS and CRA do not make threats. Anyone who claims you’ll be arrested or deported is a fraudster.
  • You’re told your ID will be revoked. The IRS and CRA have no control over your identification. Threats to revoke, freeze or cancel identification like your Social Insurance or Social Security number, driver’s license number, business license or visa is a guarantee of fraud.

How to know if you are a victim of tax refund fraud: 

Many of these signs involve suspicious activity around your taxes, using your identity. 

  • The IRS or CRA informs you that another return has already been filed using your SSN or SIN. If someone files for taxes using your identity, you won’t be able to file a legitimate return.
  • The IRS or CRA contacts you about a suspicious tax return that you didn’t file. They may reach out and ask you to verify suspicious tax return data.
  • You’re informed that an unfamiliar online IRS or CRA account has been created in your name. If someone opens an account using your SIN or SSN, but doesn’t change your contact information, you may receive a notification of the new account. 
  • You receive unsolicited tax transcripts from the IRS or CRA. If you didn’t request a transcript but receive one, it could be a warning sign of someone else acting on your behalf.‍
  • The IRS or CRA has records of employment that you don’t recognize. Scam artists may try to report a salary that you didn’t earn to increase refunds.
  • You receive W-2 or 1099 forms in the U.S. (T4 slip in Canada) from employers that you never worked for. Tax law requires employers to send these forms to their employees every year. If you get one from an employer you didn’t work for, someone has taken a job using your identity.‍
  • Your bank blocks your tax refund check. If a bank blocks a tax refund check or it’s rejected after you deposit it, this could indicate the check you’ve cashed was fraudulent and not from the IRS.‍
  • You receive a refund check before you’ve filed. If you haven’t filed but get a refund check, it’s either an error or a scam. The IRS does sometimes make mistakes, but it’s most likely a fraud. Either way, don’t cash the check — even if it’s an authentic IRS refund, you’ll need to pay back the incorrect amount (plus interest).‍
  • Your tax preparer doesn’t sign your return. Tax professionals must sign the returns they prepare. 
  • Your tax preparer can’t explain discrepancies on your return. It’s your legal responsibility to verify the information in your tax return before filing. If the return someone prepared for you doesn’t match the data you shared, be suspicious.

How To Protect Yourself Against Tax Identity Theft: 

Tax-related identity theft is difficult to catch, making prevention the best way to ensure that your identity and tax return stay secure throughout the tax season. Pay close attention to the way you communicate with the IRS or CRA — and the sensitive data you expose in the process.

Here are some preventative steps to protect yourself against tax identity theft:

  • File your taxes early. The sooner you file your taxes, the less time identity thieves have to file a return in your name. 
  • Protect your SSN or SIN and other sensitive information. If scammers know your Social Security number, they may be able to file fraudulent tax returns in your name. Keep it safe and follow these steps if you think someone has access to your SSN.
  • Beware of IRS and CRA imposter scams over the phone, text, or email. Scammers may impersonate IRS agents to trick you into giving up sensitive data.
  • Scan the Dark Web for your personal information. If your data was exposed in a data breach, it may be available for sale on the Dark Web. Use Aura’s free Dark Web scanner, like Aura’s, to see what accounts are vulnerable to hackers.
  • Consider monitoring your SSN with an identity theft protection service like Aura. The faster you can respond to identity theft, the easier it will be to resolve. 

Consider signing up for identity theft protection

Tax fraud is not always preventable, and you may not know that it has occurred until it’s too late. A fraudulent tax return means a thief has your personal information, including your Social Insurance or Social Security number. 

If you think you have been the victim of tax fraud, set up a fraud alert or credit freeze at the three credit bureaus. Protect your accounts using strong, unique passwords and two-factor authentication. 

Even if you’ve resolved a tax scam, you should consider identity theft protection like Aura since criminals can use your information to open fraudulent loans, commit bank scams, change your address and steal your mail, or even commit crimes using your name. Aura continuously monitors your credit file and alerts you when new inquiries are made into your accounts. Access your exclusive Aura offer at aura.com/marchblog 

If you suspect that you have been a victim of identity theft related to your taxes, immediately contact the Internal Revenue Services (IRS) in the U.S. or The Canadian Revenue Agency (CRA) in Canada.

Privacy and Data Collection in Tech Companies

In this webinar, our tech mentor discusses the types of data that major tech companies collect from their users. We also go over policies for sharing information with third parties and the privacy protections they have in place.

Let’s Talk About Your Digital Footprint

In this webinar, our teen tech mentor talks about different ways to search and find your digital footprint and how to protect your privacy and what you share online.

Misinformation and Older Populations

🔸 This webinar is sponsored by Newsguard 🔸

Join experts and journalists from NewsGuard to learn how misinformation spreads online and what you can do to protect yourself and loved ones from online threats.

Watch out for scammers pulling at your heartstrings

Millions of people of all ages use dating apps and sites every day to build romantic connections.  But unfortunately, those looking for love are not the only ones online dating. Hackers and criminals also prowl these sites, looking to take advantage of users – by either stealing their money or using their personal information to commit identity theft.

The numbers are alarming. Americans have lost nearly a billion dollars and Canadians lost nearly $60M to romance scams in the past year, according to the U.S. Federal Bureau of Investigations (FBI) and Canadian Anti-Fraud Centre data. Recent research  from consumer cybersecurity company Aura found that adults 50–69 made up most victims of romance scams, losing nearly $180 million in the first three quarters of 2022 alone. Adults over age 70 had the highest median loss to these scams, indicating that while fewer people in this age group are dating online, those who do lost an average of $9,000 each — the most of any group, according to Federal Trade Commission data

Here’s how it happens:

  1. Criminals create fake profiles on dating apps or social media to lure their targets.

    Often, they also engage in “catfishing” and steal attractive photos from real people’s social media or profiles. The catfishers may use flirty messages or dramatic stories that play upon victims’ emotions and build trust. Some scammers pretend to be overseas doctors, developers, or military service members — which they use as an excuse for on-and-off communication.

  2. Once you’ve connected or matched, these scammers will quickly move the relationship forward, expressing their love.

    They might even ask you to communicate off the dating app and instead use an untraceable platform like Snapchat, WhatsApp or Telegram.

  3. After they’ve gained your trust, they’ll make their ask.

    They may demand personal details, gifts, money, suggest that you invest in cryptocurrency, send private photos or visit a web link set up to steal your information. They’ll create elaborate scenarios where they need your “help,” for example covering costs for a family member, medical treatments or to get them out of trouble.

  4. Throughout the “relationship,” they may find ways to get out of visiting you in person or appearing on video chat.

    They might provide you with their phone number, but they will never be available when you call. They may even use an untraceable phone number, like a Google Voice number.

  5. They may steal your money or commit identity theft.

    You probably will not be able to recover any money you sent them, and identity theft can take months to resolve in some cases. 

Do not be afraid to cut off contact and block someone if you feel like something is off.

Ask yourself the following questions if you suspect it could be a scam:

  • Is their profile “too perfect” (job, photos, etc)?
  • Are they usually unavailable except via chat? Do they always claim to be traveling or overseas? If so, why are they trying to start a relationship with you? 
  • Are they trying to move the relationship forward quickly in terms of intimacy? Do they pressure you to do the same? 
  • Are they asking you for money, gifts, or financial “help” of any kind? 
  • Do they always have issues when it’s time to video chat or meet in person? 
  • Have they mentioned too-good-to-be-true investments opportunities (cryptocurrencies, inheritances, etc.)? Do they ask if you want to make a lot of money with no risk? 
  • Are they constantly dealing with emergencies and needing help paying their bills? 
  • Have they asked you very personal questions (address, school, type of car, birthday, maiden name, etc.) very quickly? 
  • Are they trying to get you to move the conversation to a different site, Signal or WhatsApp?
  • Do they ask you to “prove” yourself (that you’re trustworthy or that you love them)? 
  • Do they seem pushy or argumentative if you start questioning them?

Already given someone sensitive information? Secure your online and financial accounts by changing your passwords, setting up a fraud alert with the credit monitoring agencies, and reporting the fraud to the Federal Trade Commission at reportfraud.ftc.gov in the U.S. and to the Canadian Anti-Fraud Centre. Get help – monitoring your identity and finances can be stressful and time consuming — consider a solution like Aura. 

If you sent a scammer money: Report the fraud to the FBI’s Internet Crime Complaint Center (IC3) in the U.S. or Canadian Anti-Fraud Center in Canada. You may be able to reverse wire transfers or track gift cards by contacting the company you sent them through. If you sent your credit card information, cancel your card and set up fraud alerts. Solutions like Aura’s make monitoring transactions and personal information easy and offer peace of mind. 

If you think you may be a victim of identity theft or fraud: Look for the warning signs of identity theft. If you recognize any, follow these steps to secure your accounts and recover from identity theft. If you are in the U.S., report identity theft to the FTC at IdentityTheft.gov or if you are in Canada, report the incident to the Canadian Anti-Fraud Centre (1-888-495-8501).


If you think you may become a victim, have already given out information or money, or have been a victim of fraud or identity theft in the past, we highly recommend getting help. Sign up for Aura’s all-in-one digital security solution. Aura protects you from identity theft, financial fraud, and viruses like malware. Plus, if the worst happens, you have access to 24/7 Fraud Resolution Specialists and are covered by a $1,000,000 insurance policy for eligible losses due to identity theft. If you are interested in learning more about identity monitoring and protection, visit: aura.com/febblog

For more information about relationship scams, watch:

A Guide to Network Security

In this webinar, our teen tech mentor inspects the various security and privacy features on both Windows and Mac.

A matter of life and death:

Protect your family’s medical data from hackers

In 2022, over 21 million people’s data was exposed in just 11 large healthcare data breaches. Criminals hiding behind screens make a living from stealing – and selling – our personal identifiable information (PII) like names, birthdays, phone numbers, social security and insurance numbers. 

Protected health information (PHI) is worth more than 200x the value of stolen credit card information and 1000x the value of a stolen Social Security number (SSN) on the Dark Web. Given the high value and digitized nature of health data storage, medical identity theft is on the rise. It can involve the following: 

  • A hacker steals records from a hospital, doctors’ office, insurance provider or other medical office
  • Someone submits fraudulent medical insurance claims to claim cash
  • A scammer steals health insurance information to get illegitimate access to medical services, equipment, prescription drugs or financial benefits
  • A caller claims to be a Medicare representative to “verify” a Medicare number, but actually steal it or coerce victims into sharing credit card numbers to pay a fee for a new card or special treatment. 

The cost of medical identity theft can be astronomical, with almost two thirds of victims reporting losses greater than $13,500. But the risk isn’t only financial. In some cases, the legitimate policy holder may receive a misdiagnosis or incorrect treatment plan, as a result of a fraudulent and incorrect medical history being created by a criminal. In the most serious cases, unexpected bills, incorrect diagnosis and loss of benefits could cost victims their lives. 

Just last year, a U.S. Centers for Medicare and Medicaid Services subcontractor  experienced a data breach involving 254,000 Medicare beneficiaries’ PII. Those potentially impacted were notified and received updated Medicare cards and Beneficiary Identifiers. 

Canada’s largest provider of medical diagnostics and testing services, LifeLabs, was also recently breached. Hackers stole 15 million patients’ names, addresses, email, passwords, date of birth, health card numbers and even test results.

In many cases, it can take years for victims of medical identity theft to realize they’ve been targeted, only realizing when visiting the doctor’s office or the hospital. By then, benefit limits may have been reached, with thousands of dollars in fraudulent claims filed. 


Warning signs that you might be a target of medical identity theft: 

  • Unexpected bills from medical providers for services that you’ve never received
  • Unexpected medical kits sent to your home
  • Calls from debt collectors for medical debts that you don’t recognize
  • Surprising notification that you reached your benefits limit 
  • Mistakes or unexpected entries in your medical record, such as an incorrect address or date of birth
  • Fraudulent entries in your medical records, like blood tests you didn’t do or medications you weren’t prescribed.
  • Receiving a change of address confirmation from your insurance provider, even though you haven’t moved 
  • Insurance claims being denied because your medical records show you have a condition. This is one of the worst consequences of medical identity theft, and could cost victims their lives.

While all of this can feel overwhelming, the best way to tackle medical identity theft is to be proactive about securing your sensitive information. 

Here are three steps for you and your family to prevent identity theft:

  1. Safeguard your health insurance card and Medicare cards. Treat these cards and all personal health information as you would a credit card or SSN or SIN. If you lose these cards, contact your health insurance provider immediately.
  2. Protect your mail and online credentials. Never share your patient portal credentials with anyone else. You can opt for paperless bills to reduce the chance of mail fraud (like a change-of-address scam) leading to the exposure of your personal information. Another option is to get a locked mailbox to provide extra security for your sensitive information. 
  3. Review the Explanations of Benefits (EOB) and all bills and notices. It’s easy to set bills aside without a second thought. Make a habit of reviewing everything related to your medical care.

Pro tip: Sign up for a family identity theft monitoring plan. Aura can monitor and alert you if someone is trying to scam you online or your family’s sensitive information is being used for suspicious activity. If you are interested in learning more about identity monitoring and protection, visit: aura.com/janblog

For more information about  Medicare scams and medical identity theft, visit: https://www.aura.com/learn/what-can-someone-do-with-my-medicare-number