DUCA’s dedicated fraud team works to prevent, detect, and investigate fraud. Our daily business activities and due diligence practices include these security measures:
Regularly updating fraud detection and prevention systems and measures;
Ensuring our monitoring systems, controls, and security technologies are up-to-date and complemented by rigorous security procedures;
Proactive communications with Members to ensure transactions are legitimate.
DUCA’s online banking system is built upon a robust security framework so Members’ accounts and information are kept safe from unauthorized access. The following are some of the measures in place for online protection:
2-Step Verification: 2-Step Verification is the new heightened industry standard for account protection. It means that when you log in to your online banking profile with your Member Card and Password, prior to gaining access to your account, you will receive a verification code sent by text, voice call and/or email. You then have 10 minutes to enter that code to access your online profile. Failure to correctly enter the verification code after a few tries shuts out the user from further attempts and access is denied until re-instated by DUCA.
Encryption through SSL Technology: Secure Socket Layer (SSL) technology encrypts information as it moves from a Member’s computer or device to our online banking system ensuring a secure connection between a user and our banking site.
Account Alerts: Members may choose to receive alerts by email or text whenever their account is accessed. For example, when log-in information is changed, if an additional payee or e-transfer recipient is added, and more. Alerts exist to ensure Members are aware of changes and can react quickly if they are not the one who initiated the change.
Multiple Levels of Security: Firewalls and multiple levels of server security are in place, internally and externally, to protect our online environment.
Password: A password is required for online banking. (This is different from your debit card PIN number)
Use a strong, unique password that you don’t use for other accounts
Make your password long and hard to guess (avoid names, birthdays, or common words)
Never share your password with anyone
Fraudsters often create urgency and ask you to act quickly. If something feels off, stop and verify before taking action.
Bank Investigator Scam
A fraudster contacts you claiming to be from your financial institution’s fraud or investigation team. They may say your account has been compromised and ask for your help in an “investigation.” To gain your trust, they might ask you to share account details, move money, or follow specific instructions to “protect” your funds. In some cases, they may even tell you not to contact your branch. The goal is to trick you into giving them access to your money or personal information.
What to do: Do not share information or move money. Hang up and contact your financial institution directly using a trusted phone number.
Fake Website Scam
Fraudsters create a website that looks almost identical to your financial institution’s real website. You may be directed there through a link in a fraudulent email, text message, or online ad. The site may look legitimate, but it is designed to capture your login details, passwords, and personal information. Once entered, this information can be used to access your accounts and steal your money.
What to do: Always access online banking by typing www.duca.com directly into your browser—never use links in emails or texts.
Tech Support Scam
Someone calls, emails, or shows a pop-up claiming your computer has a virus. They may ask for payment or access to your device, but their goal is to steal your information or money.
What to do: Do not interact—close the message and do not allow access to your device.
CRA Scam
Fraudsters pretend to be from the Canada Revenue Agency and say you owe money or must act immediately. They may threaten fines or legal action.
What to do: Do not respond. Contact the CRA directly using an official phone number.
Charity / Fundraiser Scam
Scammers pose as charities and ask for donations, often after disasters or during the holidays. The charity may not be real.
What to do: Only donate to verified charities you trust.
Emergency / “Grandparent” Scam
Someone pretends to be a family member or friend in trouble and asks for urgent money. They rely on panic and emotion to pressure you.
What to do: Hang up and contact your family member directly using a known number.
Credit Card Scam
A caller claims your card is compromised and asks for personal information or tells you to take certain actions to “fix” it.
What to do: Hang up and call the number on the back of your card.
Lottery / Sweepstakes Scam
You’re told you’ve won a prize you never entered and must pay fees or taxes to claim it.
What to do: Do not send money—legitimate winnings do not require upfront payment.
Overpayment Scam
Someone sends you more money than expected—often by cheque or e-transfer after buying something from you (for example, through an online marketplace). They then ask you to send back the extra amount. Later, you find out the original payment was fraudulent and has been reversed, leaving you responsible for the money you sent.
What to do: Do not send money back. Always confirm the original payment is legitimate and fully cleared.
Work-from-Home Scam
You’re offered a job (such as a mystery shopper or account manager) and sent money in advance. You’re then asked to send some of it back or use it for tasks. The original payment is fake, and you’re left out of pocket for anything you send.
What to do: Do not send money. Legitimate employers will never ask you to move or return funds.
Investment Scam
You’re promised high returns with little or no risk. After you send money or pay fees, the investment turns out to be fake.
What to do: Always research and verify before investing.
Inheritance Scam
You’re told you’ve inherited money from someone you don’t know and must pay fees to receive it.
What to do: Do not send money or share personal information.
Death Benefit Scam
You receive a message saying you’re entitled to a payout or benefit and are asked for personal details or payment to access it.
What to do: Do not respond. Verify the claim through a trusted source.
Scammers Rush You
Scammers create fear or urgency, so you don’t have time to think or verify. They may say:
Scammers Ask for Payment in Unusual Ways
Scammers often request payment methods that are hard to trace or recover. Be cautious if asked to pay with:
Scammers Ask for Personal Information
Scammers try to access your accounts by asking for information you should never share. This includes:
Scammers Offer Deals That Are “too good to be true”
Scammers lure people in with offers that sound exciting but unrealistic. They may say:
Scammers Impersonate Loved Ones — Sometimes Using AI Voices
Scammers pretend to be a family member or close contact, sometimes using AI‑generated voices to sound real. They often claim an emergency and pressure you to act quickly. They may say:
Scammers Pretend to Be Trusted Organizations
Scammers pose as banks, government agencies, or companies to gain credibility and collect information or money. They may say:
Scammers Send Messages with Errors
Fraudulent messages often look slightly “off” if you look closely. Watch for:
Scammers Create Fake Problems
Scammers contact you unexpectedly and claim something is wrong to get your attention and trigger panic. They may say:
Scammers Tell You to Keep It Secret
Scammers try to isolate you so no one can warn you. They may say:
Scammers Make Messages Look Real
Scammers use technology and AI to disguise who they are and make emails, texts, and phone calls appear trustworthy.
DUCA on the go
Follow us
Working to not only be the best in the world, but also be the best for the world.
