TL;DR: Fake BMO messages claim a problem with your account or card, then push you to a fake login page or ask for a verification code. BMO says it "will never contact you via unsolicited phone call, email, text or social media message" to ask for sensitive information, passwords, PINs or verification codes. Its 2026 alerts flag one-time passcode calls, fake "bank investigators" who tell you to e-Transfer money to "safeguard" it, card-collection couriers and digital wallet scams. Send suspicious emails, or screenshots of texts, as attachments to Phishing@bmo.com, and call 1-877-225-5266 to report fraud.
What BMO says it will never do
From BMO’s report fraud page: "BMO will never contact you via unsolicited phone call, email, text or social media message to ask for sensitive information, passwords, PINs or verification codes."
BMO adds a line that sounds very 2026: "Never share this information with any unauthorized BMO channels, including through AI agents." In plain English, don’t hand your banking password or one-time codes to an AI assistant or chatbot either, however helpful it seems. If an app or bot wants your BMO code, that’s not BMO.
The scams on BMO’s 2026 watch list
BMO’s scam alerts page lists dozens of scam types. These are the ones most likely to land on a BMO customer’s phone:
| Scam | How it works (per BMO) |
|---|---|
| One-time passcode (OTP) calls | Callers pretending to be the bank ask for your code to "stop fraud" or "verify" a transaction |
| Fake "New Alert" texts | Texts that link to a fake BMO sign-in page |
| Interac e-Transfer "investigator" | A fake bank investigator says you must e-Transfer your money to your own phone number to "safeguard" it |
| Card collection | A fake fraud investigator gets your card and PIN, then sends a "courier" to pick up the card |
| Digital wallet | Phishing to get an OTP that adds your card to the scammer’s phone wallet |
| Caller ID spoofing | The call appears to come from the bank’s real number |
| Settlement payment | Fake class-action or refund claims that lead to a site asking for passwords or OTPs |
The e-Transfer one deserves a second read. Sending money "to your own number" sounds harmless, which is exactly why it works. No real bank investigator will ever ask you to move money to keep it safe.
Spotting the fake
- BMO’s real alert short code is 266898, according to its scam alerts page. A "BMO" text from a regular 10-digit mobile number is a red flag.
- Codes are for you, not for callers. BMO’s OTPs are six digits, and no genuine BMO employee will ask you to read one out.
- Check the address. BMO warns about small differences, such as an extra letter or ".net" instead of ".com".
- Slow down. Urgency ("your account will be locked in one hour") is the scammer’s main tool.
How to report
- Suspicious email: send it to Phishing@bmo.com as an attachment, then delete it. Don’t reply or click.
- Suspicious text: take a screenshot, email it as an attachment to Phishing@bmo.com, then delete the text.
- Suspected fraud, unfamiliar activity or a scam: call 1-877-225-5266.
You can also forward scam texts to 7726 so your carrier can block the sender.
If you shared something
- Call BMO on 1-877-225-5266 straight away.
- Change your online banking password, and anywhere else you used it.
- Review recent transactions, e-Transfer contacts and linked devices.
- Report losses to the Canadian Anti-Fraud Centre and your local police.
BMO says fraud reimbursement applies to eligible unauthorized transactions when you’ve met your responsibilities, so report quickly.
Stay ahead
BMO recommends signing up for BMO Alerts, keeping your contact details current and reviewing statements regularly. See also bank impersonation in Canada, fake e-Transfer notices and why one-time codes are never shared.
Scammers often build their target lists from leaked data. A free email exposure check shows which breaches your email appears in.
Frequently Asked Questions
How do I report a BMO phishing email?
Send it as an attachment to Phishing@bmo.com, then delete it.
How do I report a fake BMO text?
Screenshot it, email the screenshot as an attachment to Phishing@bmo.com, then delete the text.
Will BMO ask for a verification code?
No. BMO says it won’t contact you unsolicited to ask for passwords, PINs or verification codes.
What number does BMO send alert texts from?
BMO’s scam alerts page lists 266898 as its SMS alert number.
What is the BMO bank investigator scam?
A fake investigator tells you to e-Transfer your money to your own phone number to keep it safe. Real banks never ask you to move money to protect it.
What is BMO’s fraud number?
1-877-225-5266 for suspected fraud, unfamiliar activity or scams.