If a text says your SIN is suspended, your parcel is held for $3.99 or your bank needs « urgent verification, » assume it is a scam until you prove otherwise through a channel you started.

Canadian smishing waves recycle the same hooks: CRA refunds, Canada Post customs fees, Interac e-Transfer freezes and carrier voicemail alerts. Attackers count on busy commutes and winter parcel season. Here is how to recognize patterns, verify safely and recover if you already interacted.

Classic Canadian lure themes

  • CRA / tax: Real CRA messages are limited; they do not demand gift cards or crypto. Suspicious tax texts should send you to cra.gc.ca via manual browser entry — never the SMS link.
  • Parcels: Fake Canada Post / Purolator / courier fees spike in November–January. Track packages in the retailer’s app or the carrier site you bookmark.
  • Banks and Interac: Banks rarely ask you to « unlock » an account by SMS link. Call the number on the back of your card.
  • Carriers: Voicemail and SIM warnings can be legitimate — but open your carrier app directly instead of the text link.

Relative volume of SMS scam themes (reader reports, editorial)

Parcel fees
90
Bank / Interac
78
CRA / tax
65
Carrier / SIM
50

Verification without the link

Type known URLs yourself or use official apps. Do not call phone numbers embedded in the text. Hovering is not an option on mobile — long-press to preview URLs and look for misspellings like « canada-post-delivery-pay.ca » lookalikes. When in doubt, delete.

If you already tapped or typed a password

  1. Stop entering more data. Disconnect from the page.
  2. Change the password for that account from a different device if possible.
  3. Enable or rotate two-factor authentication.
  4. Call your bank if financial details were entered; watch for Interac requests you did not start.
  5. Report to the Canadian Anti-Fraud Centre and your carrier's spam tools.
  6. Run a mobile OS update and review newly installed profiles or apps.

iMessage, Android and filtering

Enable unknown-sender filters. On iPhone, report junk; on Android, use the Messages spam reporting built into many Canadian carrier builds. Do not argue with scammers — engagement confirms your number is active.

Family protection

Older relatives and new arrivals are frequent targets. Set a household rule: no one pays a « customs fee » from a text without a second person checking. Keep a shared note with real bank and CRA contact paths. Practice with a fake example so the first real scare is not the first conversation.

You start the session — they do not. That single habit defeats most SMS phishing aimed at Canadians.