TL;DR: Fake Scotiabank emails and texts say your account is locked or needs verifying and send you to a lookalike login page. Scotiabank says it won’t send unsolicited emails asking for passwords, PINs, access codes or card numbers, and won’t ask you to restore account access by email or text. Forward emails (unchanged subject line) or text screenshots to phishing@scotiabank.com, and call 1-866-625-0561 if you think you’ve been defrauded.
What the fakes look like
They follow a few patterns:
- Account locked: restore access through a link.
- Unusual sign-in: verify your identity now.
- Rewards expiring: points or a reward about to lapse.
They’re built to get your login onto a fake page, or to start a phone call with a fake fraud agent.
How big the problem is in Canada
The Canadian Anti-Fraud Centre received over 112,000 fraud reports in 2025, with more than $704 million in reported losses. Its top 10 included:
| Fraud type (2025) | Reports | Victims | Losses |
|---|---|---|---|
| Phishing | 2,869 | 467 | not counted |
| Spear phishing (targeted) | 813 | 571 | $67.9M |
| Fake "fraud investigator" calls | 2,167 | 1,137 | $28.3M |
| Identity fraud | 8,403 | 8,403 | not counted |
The fake investigator line is the one to remember. Scam texts and calls often work as a pair: the message primes you, then a caller posing as "bank security" talks you into acting. If a call follows a suspicious text, hang up and dial the number on the back of your card. See how one fake Scotiabank investigator took $56,000.
What Scotiabank says it won’t do
From Scotiabank’s reporting page:
- send unsolicited emails asking for your password, PIN, access code, or card or account numbers;
- ask you to validate or restore account access through email or text.
How to report
Emails: forward to phishing@scotiabank.com. Scotiabank asks you not to change or retype the subject line, because that makes investigation harder. Then delete it. Don’t forward it to friends.
Texts: take a screenshot and send it to phishing@scotiabank.com, then delete the text. You can also forward the text to 7726.
Calls: hang up and dial the number on the back of your card.
If you think you’ve been defrauded
Call Scotiabank immediately on 1-866-625-0561. Change your password, check recent transactions and e-Transfer recipients, and report to the Canadian Anti-Fraud Centre.
Related
The same playbook is used with every big Canadian bank: see RBC’s 2026 alerts and bank impersonation in Canada. A free email exposure check shows if your email is in breach data.
Frequently Asked Questions
How much do Canadians lose to phishing and fake bank calls?
The CAFC recorded $67.9 million lost to spear phishing and $28.3 million to fake fraud investigator calls in 2025, out of more than $704 million in total reported fraud losses.
How do I report a Scotiabank phishing email?
Forward it to phishing@scotiabank.com without changing the subject line, then delete it.
How do I report a fake Scotiabank text?
Screenshot it and send the screenshot to phishing@scotiabank.com, then delete the text.
Will Scotiabank ask me to restore my account access by text?
No. Scotiabank says it won’t ask you to validate or restore account access by email or text.
What number do I call if I’ve been defrauded?
Scotiabank lists 1-866-625-0561.
Sources
- Scotiabank: Report an incident or suspicious activity
- Canadian Anti-Fraud Centre
- CAFC: Top 10 frauds in 2025