FRAUD ALERT | DEBIT CARD SWAP SCAM The Durham Regional Police Service is warning the public about an ongoing debit card swap scam. In this scam, two suspects work together and will approach the victim in busy retail parking lots. One suspect will act as a customer purchasing food or goods and request the victim pay for their order in exchange for cash. They will claim they only have cash and do not have any cards for payment or that their payment cards are not functioning properly. The other suspect will act as a food delivery driver or vendor and will use a debit terminal to take payment. Both suspects are working together but will act as if they do not know each other. During the transaction, the suspect will secretly swap the victim’s debit card with a similar card, while having the victim enter their PIN into the debit terminal. The suspect will return a different card to the victim, before both suspects leave the area. The victim’s bank account is often drained within minutes. The first suspect is described as: female, Black, approximately 5’5” tall, approximately 20-30 years-old, with a medium build. The second suspect is described as: male, South Asian, approximately 5’5” tall, approximately 30-40 years-old, with a medium build, with a shaved head, full black-coloured beard. If you encounter anyone using this method to take a card payment in exchange for cash, or similar suspicious behaviour, please contact police. Anyone with information about these incidents is asked to contact the West Division Criminal Investigations Branch at 1-888-579-1520 ext. 1905. Anonymous information can be sent to Durham Regional Crime Stoppers at 1-800-222-TIPS (8477) or online at durhamregionalcrimestoppers.… and tipsters may be eligible for a cash reward.

The Durham Regional Police Service (DRPS) is aware of new information regarding the cybersecurity incident involving P3, a third-party platform used by Crime Stoppers programs to receive and manage anonymous tips. DRPS works with Durham Regional Crime Stoppers in support of community safety; however, they are separate organizations. The P3 platform is operated independently of DRPS, and the cybersecurity incident did not involve a confirmed intrusion into DRPS internal information systems. We recognize that this new information may be concerning, particularly for individuals who have provided information to Crime Stoppers with the expectation that their anonymity would be protected. The safety, privacy and trust of members of the public are extremely important to DRPS, and we take these concerns seriously. As a precautionary measure, DRPS has removed references directing members of the public to Crime Stoppers from its public-facing channels while we assess the information that has become available and determine the appropriate next steps. Our priority is ensuring that individuals who wish to provide information can do so through channels that appropriately protect their privacy and safety. During this review, DRPS will continue to receive information about crime and public safety concerns. If a member of the public wishes to report information and remain anonymous, please call 905-579-1520 ext. 5802, Monday to Friday, between 8:00 am and 4:00 pm to speak with a member of Intelligence Services. A voicemail will be available to leave messages outside those hours. The public may also email [email protected] for any further inquiry or reporting as it pertains to this matter. In an emergency or where there is an immediate threat to public safety, call 9-1-1. We recognize the important role that members of the public play in helping police keep our communities safe. People who come forward with information need to have confidence in the channels available to them, and we are committed to carefully assessing the circumstances surrounding this incident before determining our next steps. Questions regarding the cybersecurity incident, the P3 platform, the scope of information affected, or measures being taken in response should be directed to the appropriate Crime Stoppers organizations and the third-party service provider.