CIBC Phishing Protection: How to Spot and Report Scams

Secure Your Personal Data from Fraudulent Phishing Attempts

Olesya Krasavtseva
Fact-checked by Olesya Krasavtseva
Content Editor at Prostobank Consulting Prostobank Consulting Logo
Updated: 01.10.2026
Table of Contents

Phishing is a deceptive technique used by cybercriminals to trick you into revealing sensitive personal or financial data, such as your 16-digit card number, PIN, or online banking password. These fraudsters often impersonate the Canadian Imperial Bank of Commerce through sophisticated emails, text messages (smishing), or phone calls (vishing). By creating a false sense of urgency, they aim to compromise your account security and steal your identity.

The Canadian Imperial Bank of Commerce is committed to your security and will never send you an unsolicited email or text asking for your password or one-time verification codes. Understanding the common red flags—such as grammatical errors, suspicious links, and generic greetings—is your first line of defence. If you have interacted with a suspicious message, taking immediate steps to report the incident can help protect your funds and prevent further fraud.

At a Glance: Common Phishing Warning Signs

Category Details
Urgent Language Messages threatening to "lock" or "suspend" your account immediately.
Suspicious Links URLs that don't match cibc.com or contain random characters.
Request for Data Asks for your PIN, SIN, or One-Time Verification Code.
Generic Greetings Using "Dear Customer" instead of your actual name on file.

Algorithm: How to Report Phishing to CIBC

If you receive a suspicious message or believe your account has been compromised, follow this exact sequence of actions to notify the Canadian Imperial Bank of Commerce and secure your profile:

  • Do not click any links or download attachments in the suspicious message.
  • If you received a fraudulent email, forward it immediately to [email protected]. Include as much detail as possible in the body of the email.
  • If you received a suspicious text message, forward the message to 7726 (SPAM) to notify your mobile carrier, then delete it.
  • Sign on to the CIBC Mobile Banking app. Navigate to the Cards section and select Lock this card if you shared any card details.
  • Call the CIBC Fraud Department at 1-888-872-2422 for email/website fraud or 1-800-465-2422 for general identity theft concerns.
  • Once on the phone, a representative will verify your identity and help you reset your Digital Banking Password and PIN.

Pro-Tip: Efficiency Hack: To stay protected 24/7 without manual checks, enable Real-Time Fraud Alerts in your CIBC profile settings. By ensuring your current mobile number is on file, the bank can text you instantly if a suspicious transaction occurs, allowing you to confirm the purchase with a simple "Y" or "N" reply.

Troubleshooting Common Security Issues

When dealing with security updates or reporting fraud, you may encounter these three common "pain points":

  • Multi-Factor Authentication (MFA) Delays: If you are trying to reset your password and the One-Time Verification Code is not arriving, ensure your mobile signal is strong or opt for a Voice Call instead of SMS, as automated calls often bypass carrier-related network congestion.
  • Browser Navigation Errors: If the "Report Fraud" page on the CIBC website fails to load, clear your browser's cache and cookies. Outdated data can sometimes block the secure scripts required for reporting forms to render correctly.
  • Locked Online ID: If a fraudster has attempted to guess your password, your Online ID may be automatically locked for your protection. You cannot unlock this online; you must call 1-800-465-2422 and have your physical CIBC Debit Card ready for identity verification.

Frequently Asked Questions

What is the CIBC Digital Banking Guarantee?

The Canadian Imperial Bank of Commerce promises to return 100% of the money you lose from your accounts due to unauthorized digital access, provided you have met your security responsibilities, such as protecting your password and reporting the loss within 24 hours.

Should I reply to a suspicious text message to tell them to stop?

No. Never reply to a suspicious text. Replying confirms to the fraudster that your phone number is active, which can lead to an increase in future phishing attempts. Simply forward the message to the bank and delete it.

Can CIBC fraud agents ask for my verification code?

A legitimate CIBC employee will never ask you to provide a 6-digit one-time verification code over the phone. These codes are strictly for you to enter into the official website or mobile app to verify your own actions.

Official Bank Information

CIBC

Support: 800-465-2422

SWIFT Code: CIBCCATT

Video Guides

Watch our expert video reviews to navigate Canadian banking with ease.

Find bank, branch or ATM

Locate the nearest financial services, interactive maps, and contact details across Canada.