The Message Had Perfect Grammar. That Does Not Make It Safe.

For years, one of the most common pieces of scam advice was simple: look for spelling mistakes.

That advice is no longer enough.

The Canadian Anti-Fraud Centre used Cyber Security Awareness Month to warn that fraudulent messages can now be well written, websites can look professional, phone numbers can appear familiar, and artificial intelligence can produce realistic text, images, video, and voices.

In other words, the message can look exactly the way we once expected a legitimate message to look.

That does not mean families are defenseless. It means we need to stop judging only the quality of the presentation and start examining the behavior being requested.

The old “typo test” misses the real danger

Picture a parent receiving a text that appears to come from an adult child:

“My phone broke, so I am using a temporary number. I have an urgent bill due today. Can you help me make the payment? I will call you tonight.”

Nothing is misspelled. The tone sounds natural. The explanation accounts for the unfamiliar number and for why a voice call is inconvenient. The request may even fit something happening in the child's life.

A polished message can lower our guard because it passes an outdated test: it does not look like a scam.

AI can help a criminal rewrite awkward language, imitate a person's tone, create a plausible profile image, or generate a familiar-sounding voice. Public information from social media can make the story more personal. Caller ID and account names can also be manipulated.

The Canadian Anti-Fraud Centre's core lesson is worth repeating: a message, image, video, or voice that appears real is not proof that it is real.

Look at the request, not the polish

Instead of asking only, “Does this look professional?” ask:

• Did this contact arrive unexpectedly?
• Is someone pushing me to act before I can think or verify?
• Am I being told not to involve another person?
• Is the sender using a new number, new account, or unusual payment method?
• Does the message ask for money, personal information, a password, or a verification code?
• Does it direct me to a link, attachment, app, or website I did not seek out myself?
• Is the person resisting a callback through a number I already know?

One of these signs does not prove fraud. Together, they are a reason to stop the interaction and verify independently.

The 60-second defense

When a message seems believable but asks you to act, use this sequence:

1. Pause. Do not click, reply, pay, or provide information yet.
2. Leave the message. Open the official app or website yourself rather than using its link.
3. Use a known contact method. Call your family member, bank, business, or agency through a number you already trust.
4. Ask a second person. Scammers benefit when urgency keeps the decision private.
5. Verify the story, not a detail. A scammer may know a correct name, address, workplace, or recent event. Confirm whether the request itself is real.

If someone claims to be a loved one in trouble, call that person directly. If they do not answer, contact another family member or close friend. The Federal Trade Commission advises families not to trust the voice alone because voice-cloning technology can imitate someone using a short audio sample.

For financial or account warnings, use the phone number on the back of the card, a recent statement, or the company's official app. Do not use contact information contained in the unexpected message.

Build a family rule before the message arrives

Families do not need to become experts at detecting artificial intelligence. They need a process that still works when the text, image, or voice is convincing.

Try this rule:

No unexpected request for money, account access, or sensitive information gets acted on until we verify it through a second, trusted channel.

That might mean calling a known number, using a family verification phrase, checking an official app, or bringing another person into the conversation.

The rule is especially important when the request creates fear, excitement, embarrassment, or urgency. Those emotions do not mean someone is foolish. They mean the message is trying to move the decision faster than the verification.

Talk about it tonight

Show your family a normal-looking message and ask: “If this came from a new number but sounded exactly like me, how would you verify it?”

Choose the answer together. Save the right phone numbers. Agree that nobody will be offended by a callback or a verification question.

Scammers do not need your family to be careless. They need one person to feel too rushed, scared, or isolated to check. A family conversation puts the check back into the moment.

If a suspicious message arrives, use The Scam Hotline Scam Detector to identify possible pressure tactics and warning signs. Remove names, account numbers, passwords, verification codes, and other sensitive information before using any online tool.

Sources

• Canadian Anti-Fraud Centre: Spotting fraud in a changing digital landscape
• FTC: Scammers use AI to enhance family-emergency schemes
• FTC: Scammers use fake emergencies to steal money