I’m Calvin Birdsall. I'm a wealth advisor and portfolio manager at Birdsall Wealth Management Group here at National Bank Financial. As technology continues to be a larger play in our daily lives, protecting personal financial information has always been so important. So cybercrime is becoming more increasingly sophisticated, making essential for all of us to understand the risks and steps we want to take to safeguard ourselves and our families. We are very pleased to have Nava Canaco, Senior Director of Risk management and National Bank Financial with us today. Nava brings an extensive expertise in cybersecurity and digital risk management, and she'll be sharing valuable insights on today's cyber threats, practical ways to protect your information, and best practices for staying secure online. Following Nava's presentation, we'll have a brief question and answer session. Thank you so much for being with us today, Nava.
Thank you. Thank you for having me. Very happy to be here with all of you and to help provide some information that hopefully will help prevent any major incident and keep you protected, you and your family protected.
Um, so let's get right into it. Um, we have a bit of an agenda today, but before we get into the agenda, I want to take a moment to really explain why cybersecurity is key and there are extensive research. There is extensive research that was done touching on cyber security in order to see how much how, how big is it becoming a year after year. And we are seeing increases that are substantial year over year. As you can see on the screen, you know there have been assessments that see it triple or double within a few years. And we're also seeing cyber attacks that are impacting organizations and people that can have a larger impact than just on one single person. So through a fraudsters single attack, they now have the capacity to be able to affect thousands of enterprises and millions of individuals.
And so for that reason, the purpose of today's presentation is really going to focus on how do we sensitize people in order to make sure that the breadcrumb trail that we are leaving behind as individuals, the cyber breadcrumb trails are minimized so that when these attacks do take place, that were not one of the several million that are swept up in the incident that occurs. So hopefully I'm going to be able to give you a couple of really good tips and tricks and some pertinent information to make sure that you're not one of those. On the agenda today, we're going to go over a basic, which is the protection of personal information, but specifically the the definition of what is personal information. We're going to talk about the subject of the hour, which is artificial intelligence, which has been taking up a lot of time and space in our worlds lately.
We're going to go back to basics and talk about phishing and spear fishing, which touches on emails, phone, phone calls and all that stuff. We're gonna discuss passwords, the concept behind them, how best to use them, and we're also going to discuss online purchases and go over some of the basics security features that should be taken into account as an insurance policy, let's say, going forward. So let's get started on the protection of personal information. The basics of what I want to talk about in Protection of Personal Information really touches on the concept that personal information is not limited to your name, your number, your social insurance number, your address, your e-mail. We often associate personal information to specific category of information. But with technology as it's evolving, as I mentioned earlier, it's all of these little bread crumbs that we leave behind. So now it includes biometrics that we use, such as fingerprints or facial recognition when we log into systems. It can also include geolocation. When we adhere or sign up for a new application, are we granting it access to our location at all times or only when we're using the app? These are all elements that have to be taken into consideration in order to reduce your bread crumb trail. Most importantly, when we talk about what personal information is, it's any one piece of information or several combined that would allow a person to identify you. So again, it's not limited to the basic information that we know.
Let's talk about AI. Um, so the best way to really stay safe, uh, touching on AI is to limit your online footprint. And the most important concept to keep in mind when we talk about artificial intelligence is that it's machine learning. And the definition of machine learning means that it is still learning. That means that whatever information that you put into the system is used to bonafide the algorithm in the background. Now, the algorithm in the background is utilized by every single user of that platform. O whatever information you input into that machine that is learning may be outputted as a source of information to another user. So first and foremost, I do want to mention that AI is a powerful tool and I do encourage its use. However, I want to encourage its use in a safe way. So for that, I'm going to give you a couple of tips and tricks on how to stay safe while using AI.
First and foremost, never share personal information with an AI agent and ChatGPT, although it has a hell of a brain and can provide a lot of great information and you know, it is dangerous to start uploading portfolio statements or you know, tax receipts or you know any type of confidential data for the purposes of your, you know, your own assessment of a situation. The issue is that even if you adhere to the platform and you, the platform cannot guarantee how the algorithm in the background is going to utilize that information and guarantee that it won't be used as information for the purpose of somebody else's assessment. And keep in mind that when you use AI, the answer that's given is not always adequate. They are not 100% accurate all the time, hence the learning aspect of the machine. So even ChatGPT, if you ask it 100 times what does the cat eat? 1% of the time it'll tell you something wrong, it'll tell you it ate the car, it'll tell you whatever, but most of the time it'll tell you ate the cat food. That being said, it's not always right.
Keep also in mind that the sources of information are not known, so it's important to double check the information that you receive through AI, through regular online channels, Googles, you know, news line information. Double check your sources if ever you're using it to reference something. And as I mentioned, as much as if you put something in confidential and it's outputted to someone else, it's very possible that something that's outputted to you is specific to someone else in the ecosystem of that model. Another important factor to take into consideration is the garbage in, garbage out. So if the information that you are inputting into the model is inaccurate, well, what you will receive will be inaccurate in return.
I also want to mention, and I already did, that paying for the service does not give you additional levels of privacy. That's why personal information should not be shared. And the most important aspect of using AI is understanding how to create a prompt. I strongly recommend doing some crash courses or watching a couple of YouTube videos on how to best generate a prompt. And what a lot of users don't realize is the key of the wording that we use. The words are excessively important when creating a prompt in AI because it really takes for granted the words that you use and the phrase that you built.
Now that you mentioned AI agents, and I know a lot of businesses these days are using those AI agents on their website. Is this something that we should still tread lightly with even though these companies are, you know, obviously reinforcing these agents to be used? Yeah. So AI agents within organizations are followed under governance purposes. So I would feel comfortable if a chat bot, let's say, is asking me, you know, what was wrong with my delivery or, you know, do I need to speak to a representative or, um, help me understand why you're calling today, You know, but the moment that a chat agent starts asking you to input highly confidential data, I would take a step back and I would pick up the phone and I would call someone.
Let's talk a little bit about deep fakes. So for those who are not aware, deep fakes are facial recognition and biometrics tools. And basically it's a falsified video or audio that is digitally mastered using either the image of a person or a previous recording of the person. Now, what I can do is with a simple image and a recording that understands your voice, it can make the image speak as though it was actually you that was speaking. So this does become a little bit scary when we're talking about, you know, using conference calls or meeting with people through conference calls digitally. It's important to be mindful of how those bread crumbs are left in order for deep fakes to become possible. The most important one is when we use AI sites that ask us to upload biometrics, ask us to upload pictures of ourselves, ask us to use our voice.
Those pieces of information, those bread crumbs are used in the AI and again, can be used at another end for other reasons. So it's important to read the disclaimers that are associated to these websites. A lot of them offer their services for free actually. So if you, you know, you see pop-ups of upload your photo and I'll give you a a free professional image that you can use on LinkedIn. And you know, it's important to take into account that the goal of the 21th century is not money, it's data. So the data that we are feeding into these AI solutions, we need to be sure that the AI organization to which we're giving this information is not selling it to third parties on the background. Because in today's world, that's usually what's happening. And the best way to know that is really to unfortunately take the time to go through those website disclaimers regarding privacy and content upload.
So let's talk about phishing and spear fishing. And I think I'm gonna start off by explaining the difference between the two because I'm not sure it's 100% clear too many people fishing is the concept of receiving an e-mail that has a sense of urgency or a catch. You know, you received an offer, you wanna trip, but in order to do so, you have to hurry up and Register here or you have to click on this and you have to register, et cetera. And you know, behind this link is some type of a malware or a fraudster that's aiming, um, you know, to, to hurt you in some way. Spear phishing is a lot more personalized. The concept behind spearfishing is the fraudster successfully found your bread crumbs that were left behind and with that information is able to build a fraud that is specific to you. So they know your name, or they know an account number, or they know your address, or they know some of the people that you do business with and as such, communicate with you in a way that is much more personalized and can feel real. And so there's a difference between the two. But we're going to go over how to be able to spot the difference between phishing and spear fishing and what to do in order to recognize if it's a fraud or not.
So when we're looking to spot a phishing e-mail, number one is always take a look at the sender. You want to look at the e-mail of the person that is sending you this information. Is it someone that you know? Is it a gmail.com e-mail? Is itahotmail.com e-mail? Or is it some random e-mail that you have no idea who this person is? Also pay attention to isita.com. Is it a.fr? Is it a dot right somewhere else in the world that you usually do not do business that, um, pay attention if there are attachments, if there are links in the e-mail that you received, that's their gateway in order to access your system or to take over your system. So definitely avoid clicking on anything or touching anything, especially if you don't recognize the sender. It always comes with a sense of urgency. They, they want to trigger that emotion out of you in order to get you to lose your rationale and your basic thought process and focus on reacting as opposed to thinking through the process.
Usually the offer is too good to be true and there's always some type of request for money or an exchange of some sort. And you know, so be mindful of all of these signs that come up. So basically, you know, it comes down to the basics, whether or not you know the sender. Hover over links to see if you're, you recognize anything odd in the link that is in the e-mail that you received. It's important to, if you do receive a fraudulent e-mail and let's say it looks like it's legitimate but it's not and it comes from an organization that you recognize, take the time and communicate with your organization. Pick up the phone, give them a call, give them a heads up. Say that you received this type of an e-mail and you know you wanted to validate if it's legitimate or not. That's the best way to stay safe and full transparency.
Best case scenario, they tell you it was safe, you're good to go, you know, and if they tell you that it wasn't safe, well, you did great. You didn't click on anything, you didn't expose yourself to anything. And at the same time, you gave a heads up to the organization that there is a fraudster out there that's spoofing them. So they'll be more heightened and aware and they'll be able to advise other clients to be mindful of any emails that are coming in.
So a couple of good practices. Um, you know, especially when we're talking about emails, you know, never click on links, open documents, that's the, the, the gateway that they use. Avoid sending confidential information by e-mail addresses, send numbers, credit card numbers, anything, you know, anything that can stay in some type of a cloud. If you do have to do it, I'm not saying never do it because otherwise we would have a problem communicating with certain people. But what I'm saying is, if you do have to do it, be mindful of the fact that you left the breadcrumb and then after you've sent that e-mail, go into your sent and delete that e-mail and not only go into your sent and delete it, but go into your deleted and delete it from there. Make sure that the bread trail is gone. You know, it's no longer there for anybody to use.
Use the organization's messaging messaging service, uh, if possible, especially when you're dealing with external organizations. If you can avoid sending emails and you can use their internal messaging service. I highly recommend that due to the fact that it was built within a secure environment. So you're a lot safer to share confidential data through that messaging service with the organization then you are with your e-mail phone calls. So we still get these quite a bit, unfortunately. Usually you get a phone call, either they're trying to do a survey and then at the end they're trying to pull something out of you or some type of information. There's an offer that's too good to be true. And you know, there's a couple of ways or robo calls are actually the worst. And some of them claim that there's a virus or you're under threat of some sort. Again, they're going to focus on the emotion of the situation.
They're gonna put you under this pressure to make you feel a certain emotion in order to get you to react emotionally and not think through the process. So I can give you my tips on how I stay safe. The reality is, is that if I if I get a phone call from a phone number that I do not recognize, especially if it's not in my area code, that goes straight to voicemail. If it's important, they will leave a message and I will gladly call them back. Or sometimes I will even test it out and I will call them back myselves. Once it went straight to voicemail. Before I even check my voicemail, I'll call the number back. You'll find out very quickly whether or not it was a fraudulent call because you'll either end up in some type of a robo call or it'll tell you that the phone number is not available. Something that does happen now is spoofing, so you'll have fraudsters that spoof a real phone number in order to call you. Hence the importance of sometimes not answering the phone call and calling back because I've experienced situations where I've called back afterwards and the person tells me I never called you so that it wasn't even on their phone that they had called my phone number. So, um, you know, keep your contacts up to date in your phone as much as possible. So that way you can recognize if someone's avoiding using caller ID, there's a sign for that. If you don't recognize a phone number, be mindful if you do choose to answer the phone and definitely pay extra attention to phone numbers that are outside of your direct region.
So spoofing, as I mentioned, is, I mentioned it in the case of telephones, but it's not limited to phone calls. Spoofing can also happen through e-mail where a fraudster can make it seem like the e-mail is coming from a trusted source by using, you know, by editing the name that appears in the e-mail or by using logos that they got online and including them into the body of the e-mail. They will do their best in order to make the e-mail look as legitimate as possible, which does make it a little bit harder to catch. But if you take an extra 30 seconds to just analyze the e-mail, you will be able to catch it. So if you look at the detail of the e-mail address itself, if it's a spoof, it will not come from an at nbf.ca. Let's say, it will come from a random e-mail address. So already there. If you see a logo of an organization and it doesn't match e-mail, that's the first flag. Again, take the time to put your mouse over any links that are within the e-mail to see. Does it redirect me to the official website of the organization, or does it redirect me elsewhere? Those are some good practices to take.
Now, there's a couple of ways to protect yourself against fraudulent phone calls. The 1st is to completely exclude yourself from the list. You can do that by subscribing to Canada's national Do Not Call list. And in the presentation, there are several links that I will be providing the presentation to your advisor who will be able to share it with you upon request. So you will have access to all of the links within the presentation when we're done. And another aspect, which is one that I use is that I block calls. If I receive a phone call from a number that I do not recognize outside of my region, I realize it was some type of an attempt at a fraud, I will block the call itself. There are also paid services that you can register for, such as Robo Killer or e-mail that will automatically filter robo calls and fraudulent calls coming to your phone number. But I'm, I'm assuming the easiest route to that though, is just not answer a phone number that you don't recognize. Easiest would be yes, Correct. Yeah. The the reality is we all have voicemail and if something is urgent, you know, they'll leave a message so and, and you can call back.
So reporting a scam, if ever you unfortunately do become a victim to a scam, there are ways to report it. You know, and, and I wanna take the time here to mention that the priority here is not to report the scam. The priority is to protect yourself. So I will go over that at the end. If ever you are a victim of some type of a fraud, step one is protect yourself. And we're going to go over the steps later on how to do that. But Step 2 is take the time to report it to the Canadian Anti Fraud Centre. The reason being is that you know, they'll be sensitized to it, they'll pay more attention, they'll try and find the fraudsters themselves. And you know, by you flagging it, you might prevent it happening to somebody else.
So passwords, let's talk about passwords. Um, you know, passwords should be treated like toothbrushes. They are as personal as a toothbrush and you should avoid sharing them with people. And you definitely should change them every six months. Now, it's important to choose a unique password because fraudsters nowadays have caught on to human behavior. And human behavior is we capitalize the first letter. We put our special character at the end. And 99% of the time it's an exclamation point. They have caught on to all of that. So the more unique we are in creating our password, the best, the safest that we'll be. So a couple of easy ways to create a unique password. First of all, to make it robust, you need to be between 12 and 21 characters. Now that's long in order to remember. So, um, what I do recommend if somebody is adamant on not using, you know, key passes and and password generators, is to think of a sentence in your head, either the lyrics of a song or a sentence that you create on your own. And then take the 1st letter of every word of that sentence and then capitalize one or two of those letters and include a special character. And when I say include a special character, avoid the! As much as possible. Use any other special character that your heart deems worthy, but try to avoid the exclamation point as much as possible.
At the end of the day, a password remains a password, so fraudsters nowadays have systems that allow them to decrypt passwords fairly quickly. So as much as you will put a robust password of 12 to 21 characters, there is still a possibility that they can get through. Which is why the optimal way, the padlock of security is the multifactor authenticator by using two different devices, which means that when you log in, you use your e-mail or user ID and a password, but then it sends a text message to your cell phone using a completely separate device. Now I'm a little less fan of using multifactor authenticators where your second device is your e-mail, simply because if they've already accessed your e-mail, then they have access to whatever other site that you have access to using a multi authenticator with the e-mail. So for that reason, I always encourage the use of a cell phone, a completely separate device, and reception of a text message as a second authentication. And 3rd, if you do want to avoid, uh, breaking your head over the creation and remembering of passwords, especially since they should be used differently across different platforms, we should avoid using them using the same password for different purposes. You know, uh, password manager is the best way to go and they come for free now in pretty much all of our tools, whether you have iOS or Android. And even if you do not have those tools with your computer, there are other tools such as Keypass that are available.
So tips for personal computers. Um, I'm going to chat a little bit about personal computers because, you know, at home what we, what I've noticed as a risk manager is there's always one centralized computer in the house that is used by everybody in the family. Now everybody may have their own user on that computer. Not all of them have passwords attached as such. You know, there's an importance of being mindful that there are other people in the home that are using the computer. And if your 16 year old decides to go see some type of a site that provides some sort of a malware, if it infects 1 user, it infects all users, especially if there's no password. So for that reason, I wanna give a couple of best practices on home computers where there are a multitude of users that are using that home computer. The best way to go is really to have one administrator account with a very strong password. And that administrator account should be used for anything that is the safeguarding or downloading of documents, accessing bank accounts or personal information of a highly confidential data of a highly confidential nature. And the other users can utilize the, you know, the computer for homework or visiting or navigating through Internet or videos or picks of the world. Um, you know, now that being said, um, I don't want to give a false impression that having an administrator with a strong password completely protects you against some type of a cyber attack and, and, and protection of your data. But what I do want to mention here is, at the end of the day, the goal is to slow the fraudster down as much as possible for you to recognize what's going on in order to protect yourself. So if there is that robust password and he has infected another user, you very well may be able to catch it in time before it reaches the administrator. And at the end of the day, what we want to do is slow them down.
So let's talk a little bit about online shopping. Online shopping has become a bit of a gateway for fraudsters for several reasons. Unfortunately, social media platforms now actually have it into their business strategy that a certain percentage of their revenue comes from fraudsters that are allowed to advertise on their sites. So for that reason, I want to take a moment in order to go over a couple of best practices when it comes to online shopping. So first and foremost, when you, when you are online shopping, whether they're on social media or elsewhere, um, you wanna pay attention to the web URL where you are shopping. And every URL starts with HTTP and there should be an S after the HTTP. The S stands for secure, meaning that the site itself is secure. And if you have Google Chrome, you'll be able to even see that little padlock beside the, the, the URL saying that the site is secured. What that means is that if you are inputting confidential information such as the credit card number, well, it remains secure with that organization. So that's an important factor to take into account.
Second, um, pay attention to the URL itself. Let's say, for example, you wanna shop at Lululemon. Well, are you actually on the Lululemon website or are you on something that looks like a you Lululemon URL, but not the official Lululemon website? And be mindful also if you do, if you see advertisement while visiting a website because it's a store that you absolutely love and it's a crazy deal and you want to take advantage of it. What I highly recommend is avoiding clicking on that link that you see on whatever page that you're on. Go to the actual merchants website. If the deal is real, it will exist there as well and you can take advantage of it in a legitimate way on their website. The risk you expose yourself to on other websites when clicking on advertisement is a lot of fraudsters advertise even even though it might be real. It could be malware and they're just waiting for you to click on something and they can then infect your computer with some type of a malware. So pay close attention to these couple of little tidbits. Um, especially if you're putting credit card information because you want to be able to make the purchase. So that is highly confidential data. Also be mindful of drop shipping. Drop shipping is the concept of it's kind of the Amazon concept, but Amazon is secure. It's when you are with a not well known merchant that drop shipping becomes dangerous. The concept of drop shipping is that the website builder is advertising a product that he is not attached to the manufacturer. So when he receives your order, he will send your order to the manufacturing company and the manufacturing company will automatically ship it to you. So the merchant where you made your purchase has never even seen the product for himself. All he has are images on his website. So as such, there's a lot of fraud that can occur because the quality of what you received is not as advertised or you know, it's a fraudster or to begin with where the site in itself is fake.
So let's go over a couple of best practices on how to dispute. If you are doing online purchases, I highly recommend using a credit card. When you do that, avoid using PayPal. The reason being is that you have an insurance policy with your credit card. Now the credit card, you can challenge a credit card charge if what you received if you didn't receive it. First of all, if what you received did not match the description that you were told you were going to receive. So if the purchase was charged twice, if you never received a refund or if you cancelled, then you never received a refund. These are all challenges that are valid and credit card companies now actually have, you know, a massive budget for online fraud that has been going on. So they're very aware of the ecosystem in which we're living where it's very easy to be frauded nowadays. So step number one, if ever you are the victim of a fraud and online shopping, the credit card company is going to make sure that you validated first with the merchant in order to try and get reimbursed. But once you were not reimbursed, feel free to reach out to your credit card company and let them know that you attempted to manage the situation with the merchant. They did not rectify it and they will be able to take everything into their own hands and manage the situation for you.
So let's go over some information with regards to your banking products. There are, you know, you have full control as to how much a fraudster can gain access to if he does manage to successfully access your information, your accounts. And so as such, I highly recommend taking the time to adjust withdrawal limits that you have, whether it's for your bank account through an ATM machine, whether it's the limit of charges per day that you can do on a credit card. All of these are under your control and can be adjusted as per your need. So you know, the best practice is really to keep it as low as possible. And then if ever you're taking a vacation and you need to up that amount, then you log on, you change the amount, it happens immediately, you know, and, and it, you can change it back afterwards. You can take the time to validate your accounts with Equifax and TransUnion. I strongly recommend at least once a year going to get those reports to see if there's anything out of place, something, you know, a credit check that you didn't request or some new product that appeared on your credit that doesn't belong to you. It's always the best practice to make sure. Also, I wanna take dimension to take a look at your credit card statements. And a new fraud that we're noticing now, you know, is that fraudsters have caught on to the fact that we don't really check our credit card statements as in in detail every single month. And so. And they've also understood that financial institutions have limits for charges before flags are raised. So what we're seeing now is it's easier to charge $0.05 on someone's credit card statement but do it in masses than it is to try and get one big charge, one big fish in one single shot. So take the time to go over your credit card statements and just see if there's anything out of place and feel free to contact your financial institution if there is something that doesn't match.
So to conclude, I wanna give you a couple of ABC's of security what to do if ever you yourself are the victim of cyber crime. And so if you are the victim of identity theft, number one is definitely call your local police. Let them know they will open the investigation and start looking into it. Very important to communicate with your financial institutions and advise them that you've been victim of a cyber fraud. What they'll do on their side is they'll make sure to put a note in your file so that if there is any attempt to access your account, they will be additionally vigilant with whatever request that comes in. Once you've protected yourself, report the fraud to the Canadian Anti Fraud Centre to try and avoid anybody else going through that same situation. Also, take the time to report it to Equifax and TransUnion the same way that you did to your financial institutions. They're going to apply the same measures of control and the same measure of attentiveness to your account, especially if you were a victim of a cyber crime and change your passwords. Uh, that's a very important one as well is take the time to go over as many of the sites that you can remember, especially those with confidential information or access to, to money of some sort and make sure to change those passwords as quickly as possible.
So that covers the presentation for today at Calvin. I don't know if you had any questions that you wanted to ask. Yeah, I have a couple of questions, but I'll tell you what that was really fantastic. I learned a lot to myself. I even learned to probably more about online shopping, what to look out for. So I really appreciate you having that in there.
Yes, I do have a couple of questions just for you. First question, how can I verify that an e-mail, text message, phone call appears that appears to come from my bank or wealth advisor is actually legitimate, especially now that AI is and phishing can make these scams look more convincing?
Yeah. So that's a, a good question. You know, the, if it's a video conference, I strongly suggest having the conversation with your investment advisor, um, regarding this topic. You know, the best way to stay safe nowadays, especially with AI and deep fakes, as we went over earlier, if you want to make sure that it's really the person that you're talking to, have some type of a, a code word with your advisor so that when you're having that conversation and you have a doubt, you can challenge them and say, what's our code word? And, and if the fraudster doesn't have that code, the the frontier will not have that code word and therefore will not be able to provide it to you. And that should give you a signal right away that something's off. And if you do have a doubt, hang up and call your advisor on his phone number as quickly as possible and double check if it was really him. And and if it wasn't him, then to flag it to him that, you know, there's there, there, there are calls being made on his behalf that are not from him, right.
That's a great plan. I mean, I would completely understand if a client hung up on me. It was just checking to make sure that everything was legitimate. So hey, that's a great idea. And I love the idea of the secret word to keep everything safe. Second question, if a hacker gains access to one of my accounts despite I having a strong password and multi factor authentication authentication, what protections are in place at the bank and liability, if any, would I have?
Yeah. So, um, the bank has various controls in place, uh, want to make sure that that hack doesn't occur in the 1st place, but should the worst case scenario occur, there are a different controls. So I'm gonna try and break them down as much as possible. And if we're talking about the advisor specifically himself, if you, if let's say a hacker got into the client's e-mail address and tried to send an e-mail to the advisor saying, you know, can you transfer me funds and give the bank account number or an account number that isn't attached to the account? The, you know, our, our internal procedures and our advisors will make sure to contact you directly by phone in order to double check the information that they're receiving by e-mail. So there will always be a spot check when monetary movement is being asked to be done. And that's an important one. There's also additional flags are, are fraud teams at the financial at the bank are diligently keeping an eye on credit cards, bank accounts. You know, if ever there's movement that is happening, that's out of the ordinary. And you know, there will be a courtesy call to the to the client or to the advisor, depending on if you're at National Bank Financial or National Bank. But there will always be a courtesy call to double check to see is this legitimate, what's going on? Let's double check. Let's be sure. And so there are various controls in place in the ecosystem at all financial institutions in order to make sure that if something odd is happening, it raises flags and we address it appropriately. That being said, if a fraud does occur, obviously, especially if the the financial institution is at fault or the bank is at fault, we will do everything in our power to make sure that the client remains rule regardless of the situation that occurred.
Oh, well, thank you so much. Now let you know your excellent informative presentation was fantastic. I learned a lot and I hope everybody here learned a lot as well. As we know, cybersecurity is an ongoing challenge that affects us all. So today's discussion, I hope provided practical strategies to help better protect everybody and their personal and financial information. I just wanted to say that it should anybody have any questions following today's webinar if you'd like to discuss further safeguards or financial accounts?
With sensitive information, please don't hesitate to reach out. Our team at Birdsall Wealth Management Group at National Bank Financial is always available to help and provide guidance. Thank you again so much, Nava. You were amazing and fantastic help and I just wanted to appreciate everybody for tuning in and their participation. So we appreciate your trust and look forward to speaking with you again soon. So have a wonderful day. Thank you.