TORONTO, May 5, 2026 – Toronto police recently announced the results of Project Lighthouse, saying they have broken up Canada’s first known fraud case involving a mobile “SMS blaster.” Police say the suspects used equipment that mimicked cellphone towers and sent fraudulent text messages to nearby phones across the Greater Toronto Area, posing as banks and service providers. Police also said the devices caused more than 13 million network disruptions and affected tens of thousands of mobile devices. For Chinese seniors, newcomer families, and residents who frequently use mobile banking, online bill payment, or courier services, clicking links in text messages about bank alerts, tickets, Highway 407 bills, or package delivery could expose them to stolen account information, fake payments, or identity theft.
Police explain that an SMS blaster works by imitating a legitimate cellular tower. When activated, nearby phones may connect to the fake device instead of the real network. Once connected, users can receive text messages that appear to come from trusted institutions such as banks or service providers. Those messages often contain links leading to fake websites designed to steal personal, financial, or login information, a scam tactic commonly known as smishing. In this case, police say the unusual feature was that the device could operate while moving, allowing it to affect a large number of phones over a wide area.
For ordinary residents, the easiest mistake is often reacting to the urgent wording in the message. Texts mentioning things like “account problem,” “overdue ticket,” “unpaid courier fee,” or “service suspension” can make people worry about frozen accounts, damaged credit, or delayed deliveries. Seniors and newcomers with limited English may be especially vulnerable if they do not notice the difference in the website address and assume the message is real. This is an inference based on the fraud method Toronto police described.
If residents receive a similar text, they should not click the link and should not call the phone number provided in the message. The safer approach is to verify the matter independently through official channels, such as a bank’s official app, the number on the back of a bank card, the official Highway 407 site, a municipal ticket-payment page, or a courier company’s official website. If someone has already clicked a link and entered card details, login information, or a verification code, they should contact their bank immediately, change passwords, and turn on two-factor authentication. The Canadian Anti-Fraud Centre also advises people targeted by fraud texts to report the incident and keep records.
If money has already been lost, residents can report the case to police and to the Canadian Anti-Fraud Centre. It is also helpful to save screenshots of the text, payment records, website links, and any communication with the bank. Toronto police have also warned that these devices can interfere with normal cellphone connections. In some cases, police said the disruption could even affect access to emergency services such as 911 for a short period, although the exact duration and scope would depend on the incident.
It is important to note that police breaking up this case does not mean similar scams will disappear. Fraud texts can change institution names, web addresses, and wording at any time, so residents should not judge authenticity only by the name displayed in a message. For many families, a more realistic risk is that an older relative receives a message saying there is a “bank account problem” or an “overdue parking ticket” and, fearing damage to their account or credit record, tries to pay immediately. If family members have not already explained how to verify official messages, scammers may exploit that urgency to steal bank details or verification codes.
Chinese families can help in advance by writing down official contact methods for frequently used institutions, such as bank customer service numbers, the Highway 407 billing site, parking ticket payment pages, and major courier websites. If a suspicious message arrives, the safer first step is to take a screenshot and then verify it through an official channel. If English-language steps are difficult, family members or community organizations may be able to help. Not paying or entering codes through a text-message link remains the most important first defence against this kind of fraud. (LJI by Yuanyuan)
