TL;DR: Canada Post says it does not send unsolicited emails asking for card numbers, account details or passwords, and will not charge you to track or release a delivery. Its genuine text senders are 272727, 55555 and two 613 numbers. Report fraud to the CAFC.

A text claiming Canada Post could not deliver a parcel and asking for a fee is a common smishing scam. What makes this one unusual is that Canada Post publishes the exact senders it uses, so you can check a message against a short list.

What Canada Post says it never does

Canada Post says it does not send unsolicited emails requesting personal information such as credit card numbers, account or invoice numbers, address or passwords, and that it "will not charge you to track or release a delivery." A message that asks for a fee to release a parcel goes directly against that statement.

The sender checklist

Canada Post lists the legitimate senders it uses.

A text from any other number, or an email from a lookalike domain, is not from Canada Post. Scammers often use a phone number that looks local, so check the sender against this list every time.

Phishing, smishing and spoofing

Canada Post uses three terms on its security page: phishing (fraudulent emails), smishing (fraudulent text messages) and spoofing (fraudulent websites). A typical fake Canada Post text combines all three, with a smishing message that links to a spoofed website built to collect card details.

Where to report it

Canada Post's page says you do not need to report suspicious emails or texts to Canada Post itself. Instead, it directs you to the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501, and says you can forward spam texts to 7726 (SPAM). Reporting to the CAFC helps the wider fight against these scams and creates a record if you lose money.

If you clicked or paid

Call your bank or card issuer immediately using the number on the back of your card and ask them to block the card and consider a chargeback. Change any password you entered. Watch for follow-up calls from someone pretending to be your bank or the police, and hang up if you get one.

Check the real parcel

Do not use the link. Open the Canada Post site or app yourself and enter the tracking number from your order. A genuine parcel will show a real status, and a fee to release it will not appear as a text demand.

See how another Canadian courier handles fraud in the Purolator delivery text scam guide, and how overseas carriers word it in the DHL delivery text scam guide.

Protect your credit file in Canada

If you shared personal details, contact the two major credit bureaus, Equifax Canada and TransUnion Canada, and ask about placing a fraud alert on your file. Check your credit reports for accounts you do not recognise, and keep a record of any report you make, including the CAFC reference.

If your details ended up on a fake page, a free digital footprint check shows what could be traced to you.

Frequently Asked Questions

Which numbers does Canada Post use for texts?

Canada Post lists 272727, 55555, 613-734-1002 and 613-734-1004 as its legitimate text senders.

Does Canada Post charge to release a parcel?

No. Canada Post says it will not charge you to track or release a delivery.

Do I have to report a Canada Post scam to Canada Post?

Canada Post says you do not need to. It directs you to the Canadian Anti-Fraud Centre at 1-888-495-8501 and suggests forwarding spam texts to 7726.

Which email domains are genuine?

Canada Post lists notifications.canadapost-postescanada.ca, communications.canadapost-postescanada.ca and canadapost.ca.

What do phishing, smishing and spoofing mean?

Canada Post defines phishing as fraudulent emails, smishing as fraudulent text messages and spoofing as fraudulent websites.

Sources

Related Reading