[Plasmoid]

I logged into the CRA website and found something.

[Terr_]

"Contact the suspicious person back through the official number or website" is always a good heuristic, especially since it works pretty well as advice for non-technical relatives.