Protecting your money and security is important to us
We'll do everything we can to help protect your money and personal information. We'll also help you recognize scams, spot suspicious activity, and know what to do if something doesn't look right. Explore simple tips and security features to help keep your money safe all year long.
Is your card or account compromised?
Call us immediately at 1-888-277-1043
Stay alert for credit union impersonation scams
Fraudsters may use personal information found online to pose as YNCU representatives. They may pressure you with sudden penalties or tempt you with unexpected rewards. If a call, text, or email feels off, stop and don’t respond.
YNCU will never text or email asking for your member number, account details, security questions, one-time verification codes, or PIN. If someone asks for any of these, it’s a scam. Hang up or close the message, then call us directly at 1-888-277-1043
Simple ways to protect yourself daily
Online scams are becoming more sophisticated every day. A few simple habits can help protect your accounts and personal information.
Craft strong passphrases
Swap short passwords for long sentences that are easy for you to remember but impossible for a computer to guess (e.g. MyC@tLovesBlueberryMuffins!). Never share passwords or verification codes.
Know your coordinates
YNCU will never send a text message or email asking for your PIN, password, or one-time verification codes. If an urgent message asks for these, it's a scam. Only sign in through our website here at yncu.com or our official app.
Keep apps fresh and updated
Enable automatic updates for the YNCU mobile banking app to ensure you always have the latest security patches.
Suspicious alerts or transactions
Contact YNCU if something doesn't feel right please reach out to us immediately at 1-888-277-1043
Think you've been scammed?
Scam alertPhishing
What is it: Phishing happens when scammers send fake emails or texts that look exactly like YNCU, a delivery company, or a utility provider. Their goal is to trick you into clicking a link and typing in your banking password. - How to spot it: The message usually creates a false sense of panic (e.g., "Your account will be closed in 2 hours"). Look closely at the sender's email address—it will often look slightly scrambled or incorrect.
- What you should do: Never click links in unexpected messages. If you want to check your account, bypass the link entirely and log in securely through the official YNCU Mobile App.
Scam alertImposter scams and CRA fraud
- What is it: Fraudsters pretend to be from the CRA or Service Canada, claiming you either owe back-taxes or have an unclaimed benefit refund waiting for you. They may even use AI to mimic a professional-sounding agent over the phone.
- How to spot it: The real CRA will never send you a tax refund via an Interac e-Transfer link or text message. They will never threaten you with immediate arrest, nor will they ask for payment via cryptocurrency, gift cards, or wire transfers.
- What you should do: If you receive a tense call or text claiming to be from the government, hang up. Do not click any links. Log into your official, secure CRA My Account directly to verify if you have any real notifications or outstanding balances.
Scam alertCredit card scams
- What is it: Scammers try to copy your credit card data, steal your physical card, or trick you into entering card details into fake online shopping websites that feature prices that seem too good to be true.
- How to spot it: Keep an eye out for random, tiny $1.00 charges on your statement—fraudsters often test a card first before making a major illegal purchase.
- What you should do: Turn on Suspicious Spend Alerts in your YNCU profile. If you see a charge you don’t recognize, you can lock your card instantly through our app or call us right away so we can stop the card and issue a fresh replacement.
Scam alertMoney scams
- What is it: These are high-emotion scams designed to bypass your logic. A common version is the "emergency scam," where a fraudster calls pretending to be a grandchild or family member who needs bail money or emergency cash immediately. Another common version is a fake online job offer where they send you a fraudulent cheque to deposit and ask you to send some of the cash back via e-Transfer.
- How to spot it: The caller will insist that you keep the conversation a secret from other family members, or the job recruiter will push you to handle funds before you've completed official onboarding documentation.
- What should you do: Take a breath. If a family member calls in an emergency, hang up and call them back on their known, regular phone number to verify. Remember: if a cheque you deposit from a stranger requires you to send money back to them, it is always a scam.
Scam alertCommon fraud
- What is it: This involves the interception or unauthorized redirection of digital funds, frequently targeting standard Interac e-Transfers that rely on simple, easily guessable security questions.
- How to spot it: If you sell an item online and the buyer insists you click a link to "receive" your funds, or if you send money to a friend and the security answer is something incredibly basic like the word "password."
- What should you do: Enable Interac e-Transfer Auto deposit. This bypasses security questions completely and deposits funds directly into your account safely, ensuring scammers cannot intercept the transaction.
Scam alertProtecting your computer and devices
- What is it: Hackers attempt to install malicious software (malware) on your phone or laptop to track your keystrokes or steal saved passwords from your internet browser.
- How to spot it: Beware of sudden, flashing pop-up windows on your screen claiming your computer is infected and instructing you to call a 1-800 number for "Microsoft or Apple Tech Support." Real tech companies will never alert you this way.
- What you should do: Keep your phone and computer operating systems set to auto-update. These updates contain vital security patches that act like armor for your device. Most importantly, never give remote control access to your computer to anyone who calls you out of the blue.
How we protect you and your data
The YNCU security promise: We constantly adapt our risk tolerance thresholds to exceed provincial and federal compliance regulations. You can bank with the absolute confidence that your credit union is built to protect your financial future.
Canadian data and residency
Data sovereignty: We use Canadian-based data hosting for systems and services configured to support Canadian data residency. Where applicable, customer data is hosted and processed within Canadian data centres, with appropriate safeguards for data transferred between our technology partners and service providers.
Advanced identity validation: When you join or update your profile, we safely authenticate your identity, keeping fraudsters out while keeping your onboarding seamless.Testing and audits
SOC 2 Type II security: We rely on independently audited SOC 2 Type II controls across applicable technology platforms and services, providing independent assurance that defined security controls are appropriately designed and operating effectively during the audit period.
Continuous stress testing: The defensive systems of our technology partners use a combination of automated security monitoring, vulnerability scanning, and scheduled penetration testing to identify and address potential weaknesses before they can become threats.Total network defense and protection
Brute force and DDoS shielding: Our technology partners deploy advanced enterprise-grade firewalls that block automated "brute force" password-guessing bots and Distributed Denial of Service (DDoS) traffic attacks, ensuring our online banking stays up, fast, and secure.
Spoofing prevention: We use strict email and domain authentication protocols to prevent scammers from safely copying our web properties or sending fake emails disguised as YNCU.Smart monitoring and access control
Multi-factor authentication (MFA): The ultimate layer of protection. MFA adds an additional layer of protection to your account by requiring more than just your password to authenticate. This helps protect your account even if your password is compromised.
Enhanced payee and transfer alerts: Our systems monitor your account for sudden, high-risk changes. If someone attempts to add a new bill payee or initiate an unusual transfer, our enhanced security monitoring steps in instantly to verify the action, preventing unauthorized funds from leaving your account.
More ways we protect you online
PrivacyIdentity and data privacy
- Highly sensitive member information is protected using encryption and other security controls to prevent unauthorized access. Where appropriate, sensitive data is encrypted at rest and in transit, with access restricted through additional security controls.
- Access to member information is limited to job responsibilities. Employees can access the information required to perform their role, while more sensitive systems and information are protected by additional administrative safeguards.
- Your communication preferences and marketing information are managed through secure, controlled systems and data connections. We use privacy controls to help ensure your choices are recorded accurately and to protect your information from unauthorized access or disclosure.
IntelligenceIntelligent threat detection
- Powered by VeriCloud, our security systems assess login context—including device and location signals—to help identify unusual activity. When additional verification is warranted, members may be prompted for an extra authentication step before access is granted.
- VeriCloud uses automated threat intelligence to help identify credentials associated with known data breaches and compromised accounts. If a member's password is identified as compromised, security controls can prompt the member to change it, helping reduce the risk of account takeover.
IntegrityAbsolute Transaction Integrity
- Powered by Salesforce, our systems maintain detailed audit records of relevant changes to member information, system configurations and user activity. These records help provide a clear history of important actions and support security investigations, operational oversight and applicable regulatory requirements. Audit records are retained in accordance with our security, privacy and records-retention policies.
- Certain sensitive administrative request, such as changes to transfer limits, large disbursements or member contact information, are subject to additional verification and approval controls. Where applicable, these workflows require review by authorized personnel before the requested change can be completed, helping reduce the risk of unauthorized or fraudulent activity.
Something feel a little off? Make sure you call us.
Commonly asked questions
Once an Interac e-Transfer has been deposited by the recipient, it generally cannot be cancelled or reversed by the sender. Always carefully confirm the recipient's name and contact information before sending money.
If the recipient does not have Autodeposit enabled and you are asked to create a security question and answer, choose something unique that only you and the intended recipient would know. Avoid information that could be guessed or found online, such as a pet's name, birthday or the colour of your house.
If you realize that you sent money to the wrong person or believe an e-Transfer may have been fraudulent, contact YNCU's Service Excellence team as soon as possible at 1-866-635-6917. We can review the transaction and advise you on the available next steps.
Do not share the code with anyone or enter it anywhere. An unexpected verification code may indicate that someone is attempting to access your account or initiate an account-related action.
If you did not request the code, change your YNCU Online Banking password as soon as possible. Do not approve or complete any login or authentication request you did not initiate.
If you are concerned that your account or credentials may have been compromised, contact YNCU at 1-866-635-6917 so we can help secure your digital access.
No. Treat this as a potential scam. Fraudsters can spoof caller ID, making a fraudulent call appear to come from YNCU's phone number.
YN CU will never ask you to disclose your debit card PIN, online banking password or one-time verification code over the phone. We will also never ask you to share a security code to "stop," "reverse" or "protect" a transaction.
If a caller asks for this information, hang up and do not provide it. Do not call back using the number shown on your caller ID. Instead, use a trusted YNCU contact number, such as the number printed on the back of your debit card, to contact us directly.
If you have already shared your PIN, password or verification code, contact YNCU immediately so we can help secure your account.
If your YNCU Member Card® is lost or stolen outside our regular business hours, call our 24-hour card support line at 1-888-277-1043 as soon as possible to report the card and request that it be blocked.
Do not wait to see whether the card turns up. If you believe your card or PIN may have been compromised, let us know when you call so we can help protect your account and explain the next steps for getting a replacement card.
You can also use an Exchange Network ATM to change your PIN if needed, but changing your PIN should not be considered a replacement for reporting a lost or stolen card.
If you experience a financial loss resulting from an unauthorized transaction through YNCU Mobile or Online Banking, we will reimburse the eligible loss in accordance with our account and electronic banking terms.
To help protect your account, you are responsible for keeping your login credentials confidential, maintaining reasonable security of your devices, and notifying us promptly if you suspect your credentials or account information have been compromised.
For complete details, including applicable conditions and member responsibilities, please refer to our Electronic Services Agreement and applicable account terms.
Stories and articles on investing
Invest
September 17, 2026 | Scott Stelmaschuk | 7 min Read
Sustainable investing: A path to a more diversified portfolio
Spend
September 2, 2026 | Scott Stelmaschuk | 10 min Read
How to budget for back-to-school expenses in Canada
1 The YNCU New Client Payroll Offer (the “Offer”) is available to new Clients who(se): (a) Client Number was created between May 1, 2024 and October 31, 2026; (b) open a YNCU Chequing Account as the Primary Account Holder within 60 days of the date their Client Number was created; and (c) set up payroll direct deposits within 60 days of the date their Chequing Account was opened. A cash Bonus of $250 will be paid to the new Client’s YNCU Chequing Account if the Client switches their eligible automated and recurring payroll direct deposits to their new YNCU Chequing Account, provided that: (i) they deposit the full amount of their payroll direct deposits; (ii) payroll direct deposits total a minimum of $200 on a monthly basis; (iii) the first eligible payroll direct deposit is received in their Account within 60 days of successfully opening the Chequing Account; and (iv) their subsequent eligible payroll direct deposits continue for at least 2 consecutive months. The Bonus will be paid to the Client’s YNCU Chequing Account in the subsequent month following the satisfaction of the Offer conditions. Offer can’t be combined with any other Chequing cash bonus Offers and is limited to one (1) Bonus per Client. By accepting any Offer, you agree to the terms and conditions of this Offer. Full Offer Terms and Conditions, including definitions of any capitalized terms, are available here. Offer may be changed, extended or cancelled without notice.
† Savings Account, Chequing Account, and GIC interest rates expressed on this website are annual interest rates and are current as of today's date. Interest rates are subject to change without notice. Interest is calculated daily and paid monthly on our Savings and Chequing Accounts. GIC terms of one year or longer have interest calculated on the basis of 365/366 days and compounded and/or paid annually. GIC terms of less than one year have interest calculated on the basis of 365/366 and paid at maturity.
6 YNCU will waive the ABM Withdrawal Fee and Global ATM Alliance members will waive any surcharge fees for withdrawal transactions performed at a Scotiabank or Global ATM Alliance machine with your YNCU Client Card. Some exclusions apply; see our Fee Schedule for details. The current Fee Schedule can be found at yncu.ca/feeschedule.
*Trademark of Visa International Service Association and used under license
‡Pay no fees for everyday Chequing transactions. For non-standard transactions, a fee may apply.
7Full terms and conditions are outlined in the Account Terms and Client Card Cardholder Agreement available to you on our website at yncu.ca.
Interac and Interac e-Transfer are registered trademarks of Interac Corp, used under licence.
Cheque-In® is a registered trademark of YNCU Bank.
® ApplePay is a registered trademark of Apple Inc., registered in the U.S. and other countries.
™ Google Pay is a trademark of Google LLC.
® Samsung Pay is a registered trademark of Samsung Electronics Co., Ltd.
3 Some conditions may apply. Service is subject to availability and successful digital verification.
4 As of Mar 10, 2026 there were 49.9K reviews with an average rating of 4.5 from the Google Play Store and 77K reviews with an average rating of 4.7 from the App Store.
® App Store is a registered trademark of Apple Inc., registered in the U.S. and other countries.
™ Google Play is a trademark of Google LLC.