A caller claims to be your bank's fraud team — move your money to a "safe account" now
A caller pretends to be from your bank's fraud team (RBC, TD, Scotiabank, BMO, CIBC, Desjardins) saying suspicious transactions have been detected. They urgently instruct you to Interac e-Transfer all funds to a "safe account" while they investigate. The account belongs to them or a money mule.
Also known as: safe account scam Canada, bank fraud team impersonation, Interac e-Transfer authorized push payment fraud, RBC TD fraud call scam
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
What to do right now
- 1 Hang up. Call your bank back on the number on the back of your debit or credit card, or the branch's published line
- 2 Never move money to a 'safe account' at your bank's instruction — that instruction does not exist in real fraud investigations
- 3 If you already sent Interac e-Transfer: call your bank immediately — if the recipient hasn't accepted it, it can sometimes be cancelled. Interac and the Big Six banks have improved 'authorized push payment' recovery processes since 2024
- 4 If you already sent a wire: recovery is much harder — but call the bank within the same business day for the best chance
- 5 File a fraud complaint with FCAC (Financial Consumer Agency of Canada) if you feel your bank did not adequately protect you
- 6 Report to the Canadian Anti-Fraud Centre at https://antifraudcentre-centreantifraude.ca or call 1-888-495-8501.
Red flags
- ⚠ A caller claims to be from your bank's fraud team and asks you to act immediately — real bank fraud teams give you time and never rush
- ⚠ You are told there is an internal investigation and other bank staff (including the branch) cannot be trusted
- ⚠ You are instructed to Interac e-Transfer all funds to a 'safe account' — real bank fraud protection never moves money out of your account
- ⚠ The caller ID shows your bank's real number — CLI spoofing is trivial and proves nothing
- ⚠ You are asked to lie to your bank branch or teller about the reason for the transfer, or to say it's for a home renovation, a family gift, or a car purchase
- ⚠ You are told to move the money in stages under $10,000 to 'avoid triggering their fraud detection'
Known variants
-
'Refund' variant: caller says a fraudulent charge was detected and offers a refund. They set up a fake 'secure' session where you appear to receive too much ($5,000 instead of $50) — then pressure you to send the difference back via Interac e-Transfer. The refund was just moved between your own accounts.
Last seen: 5/30/2026
-
OTP-harvesting variant: caller claims to be from Wealthsimple, RBC, or another financial institution, says a transaction is being blocked, and asks the victim to read back a one-time code that arrives by SMS 'to confirm the block.' The code grants the caller account access — not a block.
Last seen: 9/16/2026
-
Smishing-to-fake-portal variant: a text message impersonating Scotiabank or RBC warns of suspicious activity and links to a fake login page. The fake portal (mimicking ScotiaOnline or RBC online banking) harvests the victim's username, password, and one-time code in real time. Scotiabank never sends login links via SMS.
Last seen: 10/24/2026
-
Card-pickup variant: a caller posing as the victim's bank says the card is compromised, then sends a courier or 'fraud officer' to the home to collect the physical debit or credit card — sometimes with the PIN on a separate slip. Maple Ridge RCMP received multiple complaints Sept 2026. No bank ever sends a courier to collect physical cards.
Last seen: 9/17/2026
-
Bitcoin ATM cash-out variant: caller from 'TD Bank fraud team' insists cash must be withdrawn and deposited into a Bitcoin machine to 'verify' or 'secure' it — staying on the phone throughout. PEI victim lost $9,800 in September 2026. No Canadian bank ever involves a crypto ATM in fraud protection.
Last seen: 10/2/2026
-
Named-officer corroboration variant: a second caller joins or takes over, introducing themselves by name as a VPD (or other police) officer. They corroborate the bank caller's story and instruct the victim to withdraw cash or deposit at a Bitcoin ATM. VPD confirmed real officer names are being used; Kelowna RCMP non-emergency line also spoofed (Oct 2026).
Last seen: 10/18/2026
-
Gold bar courier variant: caller instructs victim to buy gold bars and hand them to a courier 'for safekeeping during the investigation.' Scammers produce fake RCMP badges and meet victims at their homes. Gold scam reports confirmed in NS, ON, and AB (October 2026). No bank, police, or government ever asks a citizen to buy gold to protect their money.
Last seen: 10/27/2026
Sources
- Canadian Bankers Association — Preventing fraud
- Interac — Fraud prevention
- FCAC — Bank scam guidance
- Canadian Anti-Fraud Centre — Bank impersonation
- CP24 — Ontario woman loses $56K to bank investigator scam (Sept 2026)
- CBC News — TD Bank joins Anti-Scam Coalition, customer loses $10,000 to bank fraud call (Sept 2026)
- Yahoo Finance Canada — Reddit user nearly lost savings to fake Wealthsimple call (July 2026)
- CTV Barrie — Latest bank account fraud circulating Simcoe County: fraudsters targeting accounts (September 2026)
- CAFC fraud trends H1 2026 — bank investigator fraud 3,608 reports, 1,312 victims, $10.3M lost; notably higher activity than 2025
- CBC News / Nova Scotia RCMP — Bank investigator gold scam active in NS and Ontario: callers instruct victim to buy gold bars and hand them to someone posing as an RCMP officer (October 5-6, 2026)
- Vancouver Police Department — Bank employee scam involving police impersonation (April 2026)
- Vancouver Police Department — Scam alert: named VPD deputy chief impersonated in bank scam (July 2026)
- CBC News — Bank fraud victims want Ottawa to make big banks pay more; dozens lost life savings (October 19, 2026)
- CAFC H1 2026 fraud trends — bank investigator fraud: 3,608 reports, 1,312 victims, $10.3M in H1 2026; full-year 2025 was $37.4M — 2026 on track to surpass (October 2026)
- OPP / NL RCMP / Kelowna RCMP — Multiple October 2026 warnings: spoofed RCMP numbers (Kelowna Oct 16, NL 709 area code Oct 21) used to corroborate bank investigator calls nationwide
- Emerging signals triage Oct 24, 2026 — 18 active Scotiabank phishing signals on .ph TLD cluster (CA country hint) confirming smishing-to-fake-portal variant still active
- NTV Newfoundland — Fraudsters making scam phone calls across Canada claiming to be RCMP in Newfoundland and Labrador; spoofed 709 NL RCMP numbers used to corroborate bank investigator calls nationally (October 25, 2026)