Interac e-Transfer scams in Canada: red flags and what to do
E-Transfers are fast, cheap and everywhere, which is exactly why scammers like them. The Government of Canada's Get Cyber Safe program notes that they are favoured by scammers because they are difficult to recover. Here is how the common scams work, a quick red flag checker for a message you are looking at right now, and what to do if money already left your account.
On this page
E-Transfer red flag checker
Is the message in front of you a scam?
Tick everything that is true about the message, call or text. Nothing is sent anywhere; this runs in your browser.
The checklist is built from the warning signs listed by the Government of Canada's Get Cyber Safe program. Zero ticks does not prove a message is safe. When in doubt, do not click: open your banking app yourself, or call the number on the back of your card.
Why scammers like e-Transfers
Get Cyber Safe, run by the Communications Security Establishment, says it plainly: e-Transfers are favoured by scammers because they are difficult to recover. Once they have been deposited, e-Transfers cannot be reversed, even when fraud is involved.
That changes the whole game compared with a credit card. With a card, a disputed purchase can often be investigated and charged back. With an e-Transfer, the money moves from one account to another within minutes, and the protection has to happen before you hit send. Your bank's daily and per-transfer limits (see our e-Transfer limits guide) cap how much can leave in one go, but they do not stop a transfer you approved yourself.
The 4 common e-Transfer scams
| Scam | How it works | What it wants |
|---|---|---|
| Fake payment request | A message says you owe money for a bill, fine or service and asks you to settle it by e-Transfer | Your money, sent by you |
| Fake deposit notice | A message made to look like a real e-Transfer notification, from your bank, says money is waiting. The link goes to a fake login page | Your banking password and personal information |
| Impersonation | Someone poses as a well-known company, your bank, a government department or a person you know, sometimes using details about you found online | Your trust, then a transfer or your details |
| Interception | A scammer who has hacked your email sees your e-Transfer notifications, guesses the security answer from the message or your social media, and deposits the money into their own account | A real transfer meant for someone else |
Get Cyber Safe describes e-Transfer fraud as scammers acting as either the sender or the recipient of a fake transaction, often starting with phishing and social engineering. Interception works because people reuse passwords: one leaked password can open an email account, and the email account holds the e-Transfer links.
Red flags to stop on
- You were not expecting it. Any email, call or text about an unexpected e-Transfer, either money in or money owed.
- You cannot confirm who it is from or what it is for. If you are unsure of the sender, do not click any link or follow any instruction. Delete it.
- Pressure or secrecy. "Pay within the hour", "don't tell anyone", "your account will be frozen". Get Cyber Safe calls these common tactics to make you act before you think.
- A link to "deposit" or "log in". Open your banking app or type your bank's address yourself instead.
- The security answer is in the message. A real sender should never put the answer in the transfer notes.
Worked example: the "parcel fee" request
Marc gets a text: a parcel is held at customs and he needs to send a $4.99 fee by e-Transfer within two hours, or it goes back. The link opens a page that looks like a delivery company, then a page that looks like his bank's login.
Run it through the checker: unexpected (he ordered nothing), can't confirm the sender (a random number), pressure (two hours), a link to log in. Four flags. The $4.99 is bait. The real target is the login page: with his password, a scammer can send transfers from Marc's account up to his daily limit. If Marc's daily send limit is $3,000, the bait was $4.99 and the risk was $3,000.
The fix costs nothing: delete the text, and if he is worried, open the courier's own app or website by typing the address himself.
Settings that protect you
Get Cyber Safe lists these habits and settings:
- Turn on Autodeposit so incoming e-Transfers land directly in your account, with no security question or special link to intercept.
- If you send with a security question, make the answer strong and unique. Never use something easy to find (birth date, pet name, hometown), and never put the answer in the message.
- Use strong, unique passwords (or passphrases) for your email and banking, so one leak does not unlock everything.
- Turn on multi-factor authentication wherever it is offered.
- Skip public Wi-Fi for banking. Use cellular data or a VPN when you are away from home.
- Share less online. Scammers use public details to guess security answers.
If it already happened
- Call your bank right away using the number on your card or in your app. If the e-Transfer has not been deposited yet, ask whether it can still be cancelled.
- Change your passwords for email and online banking if you clicked a link or typed them anywhere, and turn on multi-factor authentication.
- Report it to your local police and to the Canadian Anti-Fraud Centre online or at 1-888-495-8501, as Get Cyber Safe advises.
- Watch your statements for the next few months. If you see transactions you did not make, our guide on unauthorized transactions covers your rights and the complaint steps.
Options people compare
| Option | What it changes | Watch for |
|---|---|---|
| Autodeposit on | No security question or deposit link to intercept on money you receive | Fake "deposit" emails still arrive; real Autodeposit money just appears |
| Lower your daily send limit | Caps how much can leave in a day | Ask your bank what limits it allows you to set |
| Transaction alerts | You see every transfer as it happens | Only helps if you read them |
| Pay large amounts another way | Some people use a bank draft or a card for big purchases from strangers | Each method has its own fees and risks |
These are options to understand, not recommendations. More tools are on our calculators page, and our hidden bank fees guide covers the charges that can follow fraud, like NSF fees after an account is drained.
How to check an e-Transfer message before you act
- Ask whether you were expecting this e-Transfer or payment request at all.
- Confirm who sent it and what it is for through a channel you already trust, not the message itself.
- Do not click links in the message; open your banking app or type your bank's address yourself.
- Treat any pressure to pay quickly or keep it secret as a reason to stop.
- If you clicked or paid, call your bank right away and change your email and banking passwords.
- Report the scam to local police and the Canadian Anti-Fraud Centre at 1-888-495-8501.
Questions people ask
Can an Interac e-Transfer be reversed if it was a scam?
Not once it has been deposited. Get Cyber Safe says deposited e-Transfers cannot be reversed, even when fraud is involved. If the transfer has not been deposited yet, call your bank right away and ask whether it can be cancelled.
What does an e-Transfer scam look like?
Usually an unexpected email or text that says you owe money, or that money is waiting for you, with a link to click. The link often leads to a fake bank login page built to steal your password.
How do scammers intercept e-Transfers?
If they get into your email, they can see your e-Transfer notifications and use details in the notes, or about you online, to guess the security answer and deposit the money into their own account.
Does Autodeposit make e-Transfers safer?
Get Cyber Safe suggests it, because incoming transfers go straight into your account without a security question or special link that someone could intercept.
Who do I report an e-Transfer scam to in Canada?
Your bank first, then your local police and the Canadian Anti-Fraud Centre, online or by phone at 1-888-495-8501.
Will my bank ever ask me to send an e-Transfer to protect my money?
Be very careful with any message asking you to move money to keep it safe. Hang up or ignore it, then call your bank yourself on the number printed on your card.
Looni reads your account activity and flags unusual outgoing transfers and the fees that follow, so you can call your bank sooner. Read-only: Looni never moves money.
Sources
Communications Security Establishment, Get Cyber Safe, E-transfer fraud: How to protect your online transactions (deposited e-Transfers cannot be reversed even with fraud, sender and recipient scams, phishing templates, interception through hacked email and guessed security answers, tips including Autodeposit, strong security answers, multi-factor authentication, avoiding public Wi-Fi, and reporting to police and the Canadian Anti-Fraud Centre at 1-888-495-8501). The example is illustrative.
Scammers often fish for your Social Insurance Number too; our guide on when a bank actually needs your SIN explains when to say no.
Got a call from "your bank" asking you to move money or read out a code? Read our bank investigator scam guide.