TL;DR: Canada Post says it does not send unsolicited emails asking for card numbers, account details or passwords, and will not charge you to track or release a delivery. Its genuine text senders are 272727, 55555 and two 613 numbers. Report fraud to the CAFC.
A text claiming Canada Post could not deliver a parcel and asking for a fee is a common smishing scam. What makes this one unusual is that Canada Post publishes the exact senders it uses, so you can check a message against a short list.
What Canada Post says it never does
Canada Post says it does not send unsolicited emails requesting personal information such as credit card numbers, account or invoice numbers, address or passwords, and that it "will not charge you to track or release a delivery." A message that asks for a fee to release a parcel goes directly against that statement.
The sender checklist
Canada Post lists the legitimate senders it uses.
- Text messages come from 272727, 55555, 613-734-1002 or 613-734-1004.
- Emails come from addresses on notifications.canadapost-postescanada.ca, communications.canadapost-postescanada.ca or canadapost.ca.
A text from any other number, or an email from a lookalike domain, is not from Canada Post. Scammers often use a phone number that looks local, so check the sender against this list every time.
Phishing, smishing and spoofing
Canada Post uses three terms on its security page: phishing (fraudulent emails), smishing (fraudulent text messages) and spoofing (fraudulent websites). A typical fake Canada Post text combines all three, with a smishing message that links to a spoofed website built to collect card details.
Where to report it
Canada Post's page says you do not need to report suspicious emails or texts to Canada Post itself. Instead, it directs you to the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501, and says you can forward spam texts to 7726 (SPAM). Reporting to the CAFC helps the wider fight against these scams and creates a record if you lose money.
If you clicked or paid
Call your bank or card issuer immediately using the number on the back of your card and ask them to block the card and consider a chargeback. Change any password you entered. Watch for follow-up calls from someone pretending to be your bank or the police, and hang up if you get one.
Check the real parcel
Do not use the link. Open the Canada Post site or app yourself and enter the tracking number from your order. A genuine parcel will show a real status, and a fee to release it will not appear as a text demand.
See how another Canadian courier handles fraud in the Purolator delivery text scam guide, and how overseas carriers word it in the DHL delivery text scam guide.
Protect your credit file in Canada
If you shared personal details, contact the two major credit bureaus, Equifax Canada and TransUnion Canada, and ask about placing a fraud alert on your file. Check your credit reports for accounts you do not recognise, and keep a record of any report you make, including the CAFC reference.
If your details ended up on a fake page, a free digital footprint check shows what could be traced to you.
Frequently Asked Questions
Which numbers does Canada Post use for texts?
Canada Post lists 272727, 55555, 613-734-1002 and 613-734-1004 as its legitimate text senders.
Does Canada Post charge to release a parcel?
No. Canada Post says it will not charge you to track or release a delivery.
Do I have to report a Canada Post scam to Canada Post?
Canada Post says you do not need to. It directs you to the Canadian Anti-Fraud Centre at 1-888-495-8501 and suggests forwarding spam texts to 7726.
Which email domains are genuine?
Canada Post lists notifications.canadapost-postescanada.ca, communications.canadapost-postescanada.ca and canadapost.ca.
What do phishing, smishing and spoofing mean?
Canada Post defines phishing as fraudulent emails, smishing as fraudulent text messages and spoofing as fraudulent websites.
Sources
Related Reading
- DHL Delivery Text Scam: Red Flags, Real Examples, and What to Do
- Evri Delivery Text Scam: Red Flags, Real Examples, and What to Do
- FedEx Delivery Text Scam: Red Flags, Real Examples, and What to Do
- Purolator Delivery Text Scam: Red Flags, Real Examples, and What to Do
- Toys "R" Us Canada Data Breach: What Was Taken and What To Do
- NZ Customs Duty Scam: "Pay a Fee to Release Your Parcel"
- Fake ServiceOntario Texts: “Your Licence Won't Be Renewed”
- Fake 407 ETR "Unpaid Toll" Texts: How to Spot Them and Check Your Real Balance
- How to Report Spam Texts and Emails in Canada: 7726, CASL and the Spam Reporting Centre
- “Your Package Was Intercepted”: The Fake FedEx Email With an RCMP Logo
- NZ Post Scam Texts and WhatsApp Messages: How to Tell Real From Fake