Canada Post scam texts and emails: how to spot the fake delivery notice
Quick answer
A text or email saying your Canada Post parcel is on hold until you pay a fee or click a link is a scam. Canada Post says it will never message you to ask for card details, logins or payment to release a delivery. Delete it and track the parcel on the real Canada Post site.
- Pretends to be
- Canada Post
- Last updated
How it works
Scammers pretend to be Canada Post, which is itself a victim here. Canada Post says it sees texts and emails "from time to time" claiming a delivery is on hold because of unpaid shipping fees, or because nobody was home.
The message pushes you to act fast and click a link. The link leads to a fake page that asks you to pay a small fee, confirm your address or log in. What they're after is your card details, your account logins and personal data they can reuse. Some messages link to a file download instead.
Canada Post says that when it attempts a delivery it leaves a notice card at your door or in your mailbox, and that it only emails you if you asked it to.
Red flags
- A message about a held or undeliverable parcel that you weren't expecting
- A demand to pay a fee, or enter card or bank details, to release a delivery
- Urgency, such as a deadline before the parcel is returned to the sender
- A link that doesn't go to the canadapost-postescanada.ca domain
- Typos, odd grammar or a generic greeting
- A tracking number that doesn't match Canada Post's format
- A text from a sender other than 272727 or 55555, or an email asking you to download a file
Example message
Canada Post: your parcel could not be delivered because a shipping fee is unpaid. Pay now at [link] or it will be returned to the sender.
What to do
- 1
Don't click, reply or text STOP
Replying, even with STOP or Unsubscribe, tells the sender your number is live. Delete the message.
- 2
Check your parcel on the real site
Type canadapost-postescanada.ca into your browser yourself and track the parcel there. That's where any real duty or tax fees show up.
- 3
Forward the text to 7726
Forwarding spam texts to 7726 (SPAM on most keypads) lets your phone provider block future messages from that number.
- 4
If you entered card details, call your card issuer
Use the number on the back of your card. Ask them to cancel the card and dispute any charges.
- 5
If you entered a password, change it
Change it everywhere you use it and turn on two-step verification. Watch your email and bank accounts for unfamiliar activity.
- 6
If you paid or shared ID, report it
Contact the Canadian Anti-Fraud Centre. Keep screenshots of the message and your payment receipt.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers send these in bulk, often to phone numbers and emails pulled from data breaches or bought from people-search sites, then wait for the few people who really are expecting a parcel. Our guide to what to do after a data breach covers the next steps if your details leaked. Serus finds where your phone number, address and email are listed on people-search sites and removes them, and alerts you when your details show up in a breach, so fewer scammers can reach you.
Frequently asked
Does Canada Post text or email about unpaid delivery fees?
No. Canada Post says it will never contact you to request payment for a delivery or tracking, or to ask for card, banking or login details.
How do I know a Canada Post text is real?
Canada Post says legitimate tracking texts only come from 272727 or 55555, and only if you signed up for them. Customer support texts can come from two published support numbers.
Do I need to report the message to Canada Post?
No. Canada Post says you don't need to. If you think you were defrauded, contact the Canadian Anti-Fraud Centre.
Why does the scam text know my name or number?
Scammers buy or collect phone numbers and emails in bulk. Your number doesn't mean they know anything else about you.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
