Interac e-Transfer Scams
Scams that exploit Canada's e-Transfer system — fake deposit notices, interception, and marketplace fraud.
Last reviewed: 1 August 2026
Interac e-Transfer is Canada's dominant way of sending money between bank accounts, using only an email address or mobile number. Its convenience — money moves between Canadian banks quickly and, with auto-deposit enabled, lands without any action from the recipient — is exactly what scammers exploit. Once an e-Transfer has been deposited, it is effectively as final as handing over cash: neither Interac nor the sending bank can simply claw it back.
The most widespread abuse is phishing. Fraudsters send fake 'You've received an Interac e-Transfer — click here to deposit' emails and texts that copy Interac's branding and lead to counterfeit bank-login pages. Victims who 'select their bank' and sign in on the fake page hand their online-banking credentials directly to the scammer, who can then empty the account or send real e-Transfers out of it.
e-Transfers are also targeted in transit. If a transfer is sent without auto-deposit, it is protected only by a security question — and if the answer is guessable, or if the recipient's email account has been compromised, a criminal can intercept and deposit the money before the intended recipient ever sees it. On top of that, e-Transfer is the payment method of choice in Canadian marketplace fraud, from ghost sellers who never ship goods to overpayment tricks that ask you to 'send the difference back'.
This guide covers the main scam patterns built around Interac e-Transfer, the warning signs to watch for, and what to do if you have sent money or clicked a fraudulent deposit link.
Common scams using Interac e-Transfer
Fake 'deposit your e-Transfer' phishing
An email or text claims you've been sent money and links to a page asking you to choose your bank and log in — the page is fake, and your online-banking credentials go straight to the scammer.
e-Transfer interception
A transfer sent without auto-deposit is claimed by a criminal who guessed a weak security question answer or who controls the recipient's compromised email account.
Marketplace overpayment and 'send it back'
A buyer 'accidentally' sends too much — or a stranger sends an unexpected transfer — and asks you to return the difference. Their original payment later proves fraudulent, leaving you out of pocket.
Ghost sellers demanding e-Transfer
Online sellers of pets, rentals, event tickets, or bargain goods insist on e-Transfer payment up front, then disappear once the money is deposited.
Security-question collusion tricks
A scammer posing as a buyer or 'agent' asks you to set a specific security question and answer, or to share the answer over chat, so an accomplice can claim a transfer or manipulate the transaction.
Common red flags
- An unexpected 'you've received money' email or text — especially when you weren't expecting a payment
- A deposit link that leads to a page asking you to pick your bank and enter online-banking credentials
- Sender addresses or URLs that only imitate Interac or your bank rather than matching them exactly
- A buyer or stranger who overpays and asks you to e-Transfer the difference back
- A seller who will only accept e-Transfer and refuses in-person exchange, pickup, or traceable payment options
- Anyone instructing you what security question and answer to use, or asking you to share the answer in the same channel as the transfer notice
- Pressure to send or accept a transfer urgently before you have time to verify who you're dealing with
How to protect yourself
- Treat every e-Transfer like cash — only send to people and businesses you know and have verified independently
- Never log in to online banking through a link in an email or text; open your banking app or type your bank's address yourself
- If you weren't expecting money, verify with the supposed sender through a channel you already trust before touching any deposit link
- Enable auto-deposit on your own account so incoming transfers skip the interceptable security-question step
- When sending without auto-deposit, use a strong security answer the recipient already knows and share it only through a separate channel — never in the same email or text thread
- Secure the email account tied to your e-Transfers with a unique password and two-factor authentication
- Never 'refund' an overpayment until you have confirmed with your bank that the original deposit is genuine and settled
How to report it
- Contact your bank or credit union immediately — if a fraudulent transfer has not yet been deposited, it may still be possible to cancel it
- If you entered banking credentials on a fake page, call your bank's fraud line right away to change credentials and secure the account
- Report the fraud to the Canadian Anti-Fraud Centre and file a report with your local police
- Forward phishing emails or texts to your bank's phishing-reporting address and delete them without clicking any links
Frequently asked questions
Can an Interac e-Transfer be reversed after it's been deposited?
Generally no. Once the recipient deposits the money, the transfer is complete and neither Interac nor your bank can simply pull it back — which is why scammers favour it. If the transfer is still pending and unclaimed, contact your bank immediately, as it may be possible to cancel it. If you were defrauded, report it to your bank and the Canadian Anti-Fraud Centre anyway; recovery is not guaranteed, but reporting fast gives the best chance.
I clicked a fake 'deposit your e-Transfer' link and entered my banking details — what should I do?
Act immediately. Call your bank's fraud line, tell them your online-banking credentials were entered on a phishing site, and follow their instructions to change your password and secure the account. Also change the password on the email account linked to your banking, enable two-factor authentication, and watch for unauthorised transfers or logins.
Does auto-deposit make e-Transfers safer?
It removes one attack: with auto-deposit, incoming transfers land directly in your account with no security question that a criminal could guess or intercept. But it does nothing about the other direction — money you send to a scammer with auto-deposit enabled is deposited instantly and is effectively unrecoverable. Auto-deposit protects you as a recipient; only verifying who you're paying protects you as a sender.