![\"Toronto](\"https:\/\/www.europesays.com\/canada\/wp-content\/uploads\/2026\/04\/a8588e53146404ed24d11f3c6a1736ae.png\")
Toronto Police Services Detective Sergeant Lindsay Riddell speaks to media on Project Lighthouse + Image of SMS blasters in back of a car <\/p>\n Toronto Police Services Detective Sergeant Lindsay Riddell speaks to media on Project Lighthouse + Image of SMS blasters in back of a car <\/p>\n
Your phone got a text from your bank. The sender ID looked right. The message warned of suspicious activity and asked you to verify your account. You clicked.<\/p>\n
The problem? The text didn’t come from your bank. It came from a device in the back seat of a car.<\/p>\n
That’s not a hypothetical. It’s what Toronto police allege happened during a months-long operation involving a portable fake cell tower \u2014 called an SMS blaster \u2014 that silently pulled tens of thousands of Greater Toronto Area phones off legitimate networks and flooded them with fraudulent texts. These texts appeared to be from legitimate financial institutions or government agencies \u2014 they weren’t (1).<\/p>\n
Don’t Miss <\/p>\n
On March 31, 2026, the Toronto Police Service (TPS) executed search warrants in Markham and Hamilton, ON, arresting three men as part of Project Lighthouse. Police laid 44 combined charges \u2014 and more than 13 million network disruptions were recorded in connection with the operation (2).<\/p>\n
Police have not confirmed a total dollar figure in losses at this time, and no specific financial institutions were named in the press release. The arrests and charges are believed to be the first of their kind in Canada.<\/p>\n
Are you protected against the latest digital threats? Find a bank<\/a> that offers real-time fraud alerts and multi-factor authentication \u2014 and keep your money safe<\/a>.<\/p>\n What is an SMS blaster \u2014 and why is it so dangerous? <\/p>\n An SMS blaster \u2014 also called an IMSI catcher or “stingray” \u2014 is a portable device that impersonates a legitimate cellular base station. Nearby smartphones automatically connect to it because it broadcasts a stronger signal than real towers in the area. Once a phone connects, the operator can send text messages that appear to originate from a trusted sender \u2014 a bank, Canada Post or a government agency \u2014 rather than a phone number.<\/p>\n The devices are advertised for sale online for as much as $50,000 and are reportedly capable of reaching phones within a 500-metre to 2-kilometre radius. A blaster driven through a busy urban corridor can sweep up hundreds of devices in minutes \u2014 all without the phone owner ever knowing their handset briefly left the real network.<\/p>\n Story Continues <\/p>\n That combination \u2014 apparent legitimacy plus invisible interception \u2014 is what makes smishing (SMS phishing) attacks launched from a blaster so effective. A text that appears to come from your bank’s actual short code is far harder to dismiss than one arriving from an unknown number.<\/p>\n Read more: Here are the 3 net worth milestones that change everything for Canadians<\/a> (and what they say about you)<\/p>\n How to tell if your bank text is real \u2014 or a trap <\/p>\n The core problem with SMS blaster fraud is that it defeats one of the mental shortcuts most Canadians rely on: If a text looks like it came from my bank, it probably did.<\/p>\n This recent arrest should be a wake-up call for all Canadians who use cellphones: Those text messages may not be legitimate. Here’s what to watch for:<\/p>\n Need to click? Pass on it <\/p>\n Your bank will never ask you to click a link and enter login credentials or a one-time passcode in response to an unsolicited text.<\/p>\n If a message creates urgency \u2014 “your account has been locked,” “verify now to avoid suspension” \u2014 that pressure is a signal to stop, not comply.<\/p>\n Validate the sender <\/p>\n Look at what the link actually says before tapping \u2014 not the display text, but the raw URL.<\/p>\n Legitimate bank communications route to domains you recognize. A convincing impersonation text often routes to a subtly misspelled or unrelated domain.<\/p>\n When in doubt, pick up the phone <\/p>\n If you are unsure whether a message is real, call the number on the back of your bank card. Do not call the number provided in the text.<\/p>\n Bank Safely Today<\/a><\/p>\n What to do if you clicked <\/p>\n If you received a suspicious text and tapped a link \u2014 or worse, entered credentials \u2014 act quickly:<\/p>\n Contact your bank immediately to flag potential unauthorized access and change your online banking password.<\/p>\n Ask about placing a temporary hold or alert on your account.<\/p>\n Check your Canada Revenue Agency (CRA) My Account for any unauthorized changes to direct deposit information.<\/p>\n Report the text to the Canadian Anti-Fraud Centre (CAFC) at antifraudcentre.ca or 1-888-495-8501<\/p>\n Forward the suspicious message to 7726 (SPAM) \u2014 a shortcode that works with all major Canadian carriers and feeds into carrier-level fraud detection.<\/p>\n If you entered personal information*,* consider placing a fraud alert with Equifax Canada or TransUnion Canada.<\/p>\n The broader warning from Project Lighthouse is that SMS blaster technology is commercially available and cheap enough, relative to potential fraud proceeds, that copycat operations are a real risk.<\/p>\n What To Read Next <\/p>\n Join 19,000+ readers and get Money.ca\u2019s best stories and exclusive interviews first \u2014 clear insights curated and delivered weekly. Subscribe now.<\/a><\/p>\n Article sources <\/p>\n We rely only on vetted sources and credible third-party reporting. For details, see our editorial ethics and guidelines<\/a>.<\/p>\n Toronto Police Service (1)<\/a>; CBC News (2)<\/a><\/p>\n This article originally appeared on Money.ca<\/a> under the title: Is your bank text real or a trap? What Canada’s first SMS blaster bust means for your money<\/a><\/p>\n This article provides information only and should not be construed as advice. It is provided without warranty of any kind.<\/p>\n","protected":false},"excerpt":{"rendered":"Toronto Police Services Detective Sergeant Lindsay Riddell speaks to media on Project Lighthouse + Image of SMS blasters…\n","protected":false},"author":2,"featured_media":24205,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[17,4060,817,811,11906,11905,11907,1290,3100],"class_list":{"0":"post-24204","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-canada","8":"tag-canada","9":"tag-canada-post","10":"tag-canadians","11":"tag-dave-ramsey","12":"tag-project-lighthouse","13":"tag-sms-blaster","14":"tag-suspicious-activity","15":"tag-text","16":"tag-toronto-police"},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/posts\/24204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/comments?post=24204"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/posts\/24204\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/media\/24205"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/media?parent=24204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/categories?post=24204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/canada\/wp-json\/wp\/v2\/tags?post=24204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}