TL;DR: A fake CIBC text says: "CIBC Alert: We’ve implemented restrictions on your debit account" and links to a look-alike site. It can land in the same thread as real CIBC messages. The site asks for your login, card number, security code and SIN, and may push fake "security software." Don’t click. Forward phishing texts and emails to fraud@cibc.com, and if you entered anything, call 1-800-465-2422.
The text
MalwareTips documented the message:
"CIBC Alert: We’ve implemented restrictions on your debit account (450644*)."
It then gives a CIBC-sounding web address "to release these restrictions."
Why it fools people
- Same thread as real CIBC texts. Spoofed sender IDs can drop fakes into your genuine bank conversation. Your phone groups by sender name, not by honesty.
- Partial card number. Seeing digits that look like yours feels official. Many cards share the same first six digits, so it proves nothing.
- Urgency. A restricted debit card feels like an emergency at the grocery checkout.
What the fake site asks for
- Online banking username and password
- Card number and security code
- Social Insurance Number
- Sometimes a "security software" download, which is malware
With that, criminals can log in, make transfers and open credit in your name.
How to check a real alert
Open the CIBC app or type cibc.com yourself, or call the number on the back of your card. Never use the link or number in the text.
How to report it
CIBC’s fraud reporting page says to email fraud@cibc.com with a description and the fraudulent message. That address is only for reporting fraudulent texts and emails. Also forward the text to 7726 (how).
| Situation | CIBC number |
|---|---|
| Identity fraud, phishing links, spyware | 1-800-465-2422 |
| Debit card fraud | 1-800-465-2422 |
| Credit card fraud | 1-800-465-4653 |
| Email and website fraud (non-email inquiries) | 1-888-872-2422 |
If you entered details
CIBC recommends you:
- Call CIBC using the right number above.
- Lock your card.
- Place a fraud alert with Equifax or TransUnion (guide).
- Check email and phone forwarding for rules you didn’t create.
- Call your phone provider if your phone suddenly can’t call or text, a possible SIM swap.
- Review account activity monthly.
CIBC says it will help you recover money lost to fraud if you met your responsibilities to keep your accounts safe, under its Digital Banking Guarantee.
Other bank scams
Same trick, different logo: RBC, TD, BMO, Scotiabank, Desjardins. A free exposure check shows if your number or email is in leaked data.
Frequently Asked Questions
Is the CIBC "restrictions on your debit account" text real?
No. It’s a phishing text that links to a fake CIBC website.
How do I report a CIBC phishing text?
Email fraud@cibc.com with a description and the message, and forward the text to 7726.
What is CIBC’s fraud phone number?
For identity fraud, phishing and debit card fraud, call 1-800-465-2422. For credit card fraud, call 1-800-465-4653.
Can a scam text appear in my real CIBC message thread?
Yes. Spoofed sender names can make fake texts appear alongside genuine ones.