Can I get scammed through e-transfer auto deposit in Canada?
Many Canadians turn on Autodeposit after hearing it is the safe way to receive e-Transfers, and as a recipient it is a good habit. But "safer" is not "scam-proof". Fraudsters work on people, not only on technology, and most e-Transfer losses start with a message, a call or a fake notification. This guide explains what Autodeposit actually protects, the scams it does not touch, how to register, and what to do within the first hour if something goes wrong.
On this page
What Autodeposit actually does
Interac explains that Autodeposit lets incoming e-Transfer funds go directly into your bank account, with no security question and answer needed. You register by logging into online or mobile banking, opening your e-Transfer profile settings, adding an email address or phone number, and choosing the account to deposit into. You then verify the registration, and steps vary by institution. Once you are registered, money is deposited automatically and you get a notification that funds were received.
Interac says Autodeposit has the same bank-grade security standard as a regular e-Transfer, and that email and text messages only notify you and give deposit instructions. Money never travels by email or text.
What Autodeposit protects you from
Its main strength is against interception. CIBC explains that interception happens when a fraudster diverts a legitimate transfer into their own account, and it can happen when your email has been hacked. Once inside an email account, a criminal can see e-Transfer notifications and guess, reuse or search for the security answer. Autodeposit takes the security answer out of the process, so there is nothing to guess.
The Government of Canada's Get Cyber Safe site lists Autodeposit among its tips for exactly this reason: it does not require security questions or special links. If you regularly receive money from the same people, it also removes a step that attackers could exploit.
What Autodeposit does not protect you from
Autodeposit protects the receiving end of a legitimate transfer. It does nothing about scams where you are the one tricked. Get Cyber Safe describes several patterns:
- Sender and recipient scams. Scammers pose as the sender or recipient of a fake e-transfer, often through phishing messages about a bill or a fake bank request.
- Phishing. Messages may contain malicious links asking for sensitive information, such as a fake notification that sends you to a look-alike banking site.
- Account takeover. Interception starts with scammers taking over an account such as your email. Autodeposit helps, but a hacked email account is still a serious problem.
The most important point is the last one. Get Cyber Safe says that once e-transfers are deposited they cannot be reversed, even when fraud is involved. Interac adds that it does not hold funds and cannot trace them, so problems go to your financial institution. That is why stopping a scam before you send is the only reliable protection. See our guides on the bank investigator scam and e-Transfer scams for the common scripts.
Three illustrative scenarios
| Scenario | Does Autodeposit help? | What to do |
|---|---|---|
| A hacker in your email redirects a legitimate transfer meant for you | Yes, there is no security answer to guess | Secure your email, turn on multi-factor authentication |
| A caller says "your account is compromised, send money to a safe account" | No, you are sending the money | Hang up and call the number on your card. Never move money on a caller's instructions |
| You get an unexpected e-Transfer notification or a link asking you to log in | No, the link itself is the danger | Do not click. Contact the sender another way; if you cannot, forward it to phishing@interac.ca |
These are general patterns, not reports of specific cases. Interac also advises that if you get a notice about a class-action payment and do not have Autodeposit, you should decide whether to accept the funds only after verifying the sender by contacting the organization another way, such as by phone.
A practical protection checklist
- Turn on Autodeposit for transfers you receive, in your bank's e-Transfer settings.
- Secure your email. Use a strong, unique password or passphrase and enable multi-factor authentication where available. CIBC advises not reusing passwords across accounts.
- Send with care. If you send a transfer with a security question, use a unique question and answer that is hard to guess, do not put the answer in the question, and do not share it by email, text or social media.
- Treat urgency and secrecy as warning signs. Get Cyber Safe says requests for secrecy or urgent action are red flags.
- Avoid banking on public Wi-Fi. Use a VPN or cellular data instead.
- Confirm before you click. If unsure, delete the notification instead of clicking any links, and contact the sender through a channel you already trust.
Know your sending limits too, since they cap the damage: see Interac e-Transfer limits in Canada. And scammers often fish for your SIN as well, so read when a bank actually needs your SIN.
If you think you have been scammed: the first hour
- Contact your financial institution immediately using the number on your card or official app, not a number from a message. Interac points problems to your institution, and CIBC says it will help people recover money if they have met their responsibilities for keeping accounts secure under its guarantee, so ask what your bank offers.
- Change passwords on email and banking, starting with email, and turn on multi-factor authentication.
- Report it. Get Cyber Safe says to report to your local police and to the Canadian Anti-Fraud Centre, online or at 1-888-495-8501.
- Keep records. Save screenshots, emails and transaction details.
- Check your accounts and credit. If personal information was shared, see our guides on unauthorized transactions and sending an e-Transfer to the wrong person.
Do not count on recovering the money. The fastest protection is the pause before sending. More tools are on our calculators and tools page.
Questions people ask
Can you get scammed with Interac Autodeposit?
Yes. Autodeposit removes the security question that fraudsters try to guess, which helps against interception. It does not stop scams that trick you into sending money, phishing messages or account takeovers, and deposited e-transfers cannot be reversed.
Is Autodeposit safer than a security question?
For receiving money, it is generally safer against interception, because there is no security answer to guess. Interac says it has the same bank-grade security as a regular e-Transfer. It does not protect you from scams where you are tricked into acting.
Can an e-Transfer be reversed or cancelled?
The Government of Canada's Get Cyber Safe site says that once e-transfers are deposited they cannot be reversed, even when fraud is involved. Contact your financial institution right away; Interac says it does not hold funds and cannot trace them.
How do I turn on Autodeposit?
Log into online or mobile banking, open your e-Transfer profile settings, add an email address or phone number, and choose the account to deposit into. You will be asked to verify the registration. Steps vary by institution.
What should I do if I get an unexpected e-Transfer notification?
Do not click links in it. Contact the sender another way to confirm. If you cannot confirm it, Interac says to forward it to phishing@interac.ca. Do not enter banking details on a site reached from the message.
Where do I report e-Transfer fraud?
Report it to your local police and the Canadian Anti-Fraud Centre, online or by phone at 1-888-495-8501, and contact your financial institution immediately.
Will my bank refund me if I am scammed?
It depends on the institution and the circumstances. CIBC, for example, says it will help recover money if you have met your responsibilities for keeping your accounts secure, under its Digital Banking Guarantee. Ask your own bank what applies.
Looni reads your statements and flags odd charges, fees and subscriptions so you can act sooner. Read-only, and Looni is not a bank and does not move your money.
Sources
Communications Security Establishment, Get Cyber Safe, E-transfer fraud: How to protect your online transactions (once deposited, e-transfers cannot be reversed even when fraud is involved; sender and recipient scams, phishing, interception; Autodeposit, unique security answers, multi-factor authentication, public Wi-Fi; reporting to police and the Canadian Anti-Fraud Centre at 1-888-495-8501); Interac, Interac e-Transfer FAQ (how Autodeposit works and how to register, no security question needed, unexpected notifications, phishing@interac.ca, Interac does not hold funds and cannot trace them); CIBC, e-Transfer fraud and interception (interception through hacked email, security question tips, password advice). The scenarios are illustrative and describe general patterns, not specific cases.