is that a scam?
← Back to all scams
HIGH banking Last reported: Oct 27, 2026 Share

A caller claims to be your bank's fraud team — move your money to a "safe account" now

A caller pretends to be from your bank's fraud team (RBC, TD, Scotiabank, BMO, CIBC, Desjardins) saying suspicious transactions have been detected. They urgently instruct you to Interac e-Transfer all funds to a "safe account" while they investigate. The account belongs to them or a money mule.

Also known as: safe account scam Canada, bank fraud team impersonation, Interac e-Transfer authorized push payment fraud, RBC TD fraud call scam

What to do right now

  1. 1 Hang up. Call your bank back on the number on the back of your debit or credit card, or the branch's published line
  2. 2 Never move money to a 'safe account' at your bank's instruction — that instruction does not exist in real fraud investigations
  3. 3 If you already sent Interac e-Transfer: call your bank immediately — if the recipient hasn't accepted it, it can sometimes be cancelled. Interac and the Big Six banks have improved 'authorized push payment' recovery processes since 2024
  4. 4 If you already sent a wire: recovery is much harder — but call the bank within the same business day for the best chance
  5. 5 File a fraud complaint with FCAC (Financial Consumer Agency of Canada) if you feel your bank did not adequately protect you
  6. 6 Report to the Canadian Anti-Fraud Centre at https://antifraudcentre-centreantifraude.ca or call 1-888-495-8501.

Red flags

  • ⚠ A caller claims to be from your bank's fraud team and asks you to act immediately — real bank fraud teams give you time and never rush
  • ⚠ You are told there is an internal investigation and other bank staff (including the branch) cannot be trusted
  • ⚠ You are instructed to Interac e-Transfer all funds to a 'safe account' — real bank fraud protection never moves money out of your account
  • ⚠ The caller ID shows your bank's real number — CLI spoofing is trivial and proves nothing
  • ⚠ You are asked to lie to your bank branch or teller about the reason for the transfer, or to say it's for a home renovation, a family gift, or a car purchase
  • ⚠ You are told to move the money in stages under $10,000 to 'avoid triggering their fraud detection'

Known variants

  • 'Refund' variant: caller says a fraudulent charge was detected and offers a refund. They set up a fake 'secure' session where you appear to receive too much ($5,000 instead of $50) — then pressure you to send the difference back via Interac e-Transfer. The refund was just moved between your own accounts.

    Last seen: 5/30/2026

  • OTP-harvesting variant: caller claims to be from Wealthsimple, RBC, or another financial institution, says a transaction is being blocked, and asks the victim to read back a one-time code that arrives by SMS 'to confirm the block.' The code grants the caller account access — not a block.

    Last seen: 9/16/2026

  • Smishing-to-fake-portal variant: a text message impersonating Scotiabank or RBC warns of suspicious activity and links to a fake login page. The fake portal (mimicking ScotiaOnline or RBC online banking) harvests the victim's username, password, and one-time code in real time. Scotiabank never sends login links via SMS.

    Last seen: 10/24/2026

  • Card-pickup variant: a caller posing as the victim's bank says the card is compromised, then sends a courier or 'fraud officer' to the home to collect the physical debit or credit card — sometimes with the PIN on a separate slip. Maple Ridge RCMP received multiple complaints Sept 2026. No bank ever sends a courier to collect physical cards.

    Last seen: 9/17/2026

  • Bitcoin ATM cash-out variant: caller from 'TD Bank fraud team' insists cash must be withdrawn and deposited into a Bitcoin machine to 'verify' or 'secure' it — staying on the phone throughout. PEI victim lost $9,800 in September 2026. No Canadian bank ever involves a crypto ATM in fraud protection.

    Last seen: 10/2/2026

  • Named-officer corroboration variant: a second caller joins or takes over, introducing themselves by name as a VPD (or other police) officer. They corroborate the bank caller's story and instruct the victim to withdraw cash or deposit at a Bitcoin ATM. VPD confirmed real officer names are being used; Kelowna RCMP non-emergency line also spoofed (Oct 2026).

    Last seen: 10/18/2026

  • Gold bar courier variant: caller instructs victim to buy gold bars and hand them to a courier 'for safekeeping during the investigation.' Scammers produce fake RCMP badges and meet victims at their homes. Gold scam reports confirmed in NS, ON, and AB (October 2026). No bank, police, or government ever asks a citizen to buy gold to protect their money.

    Last seen: 10/27/2026

Sources

Share this with someone who might need it