Unexpected Interac e-Transfer email or text? Do not use its link to investigate. Contact the supposed sender through a separate, trusted channel and check your bank through its own app. A familiar logo, sender name or convincing payment screenshot is not enough to authenticate a notification.
Prepared for FreeSpin Review with AI assistance. Published and sources checked: 24 October 2026. Independent consumer information; not banking advice or a fraud-reporting service.
A practical check before you click
Start with the payment context, rather than the design of the message. Were you expecting money from this person or business? Can you verify the amount and reason without replying to the notification? Interac recommends independently confirming unexpected transfers and avoiding links or replies when the sender is unknown. Interac payment-security guidance.
| What you see | Safer next step |
|---|---|
| A transfer you were not expecting | Ask the claimed sender through a contact method you already trust. |
| A message asking you to enter banking details urgently | Leave the message and contact your bank independently. |
| A screenshot saying you have been paid | Check your own banking records; a screenshot is only a claim. |
| A real payment is missing after verification | Use our pending or missing transfer checklist to organise the transaction evidence. |
Can a genuine-looking email still be unsafe?
Yes. Interac explains that phishing messages can impersonate familiar people and organisations and copy their branding. Unexpected deposit or money requests should be checked through another channel. Typos or unusual formatting are warning signs, but the absence of mistakes does not prove authenticity. See Interac’s explanation of email fraud.
A useful rule for this checklist: inspect the situation without interacting with the suspicious message. Do not reply to ask whether it is genuine, call a number supplied inside it, or provide a verification code to the sender. If a business claims it sent an existing withdrawal, open your established account independently and ask its verified support team to confirm the payment record.
Does Autodeposit stop every scam?
No. Autodeposit removes the security-question step for transfers sent to your registered email address or mobile number. Interac describes it as a way to reduce phishing exposure, not a reason to trust every notification. Continue checking unexpected messages and protect both your email and banking accounts.
There is also a different risk: interception of an actual transfer. CIBC explains that criminals with access to an email account may find transfer notifications and guess or obtain security answers. Its advice includes separate, strong account passwords, Autodeposit, and security answers shared through a safe channel rather than email or text. Read CIBC’s interception-fraud guidance.
If you clicked or shared information
Record what happened accurately: opening a message, following a link, entering a password and sending money are different events. Tell your bank which occurred. Interac directs suspected fraud victims to their financial institution and the Canadian Anti-Fraud Centre. Do not wait for this website or an unknown recovery service to assess your account.
The CAFC victim checklist recommends preserving evidence, contacting the financial institution involved, reporting to local police and obtaining a file number. For identity fraud it also recommends password changes, account flags and contacting both credit bureaus. Use the official reporting route linked from that page.
Save this private incident note
- Time received and the claimed sender.
- What the message asked you to do.
- Whether you clicked, entered information, installed anything or paid.
- Any transaction amount, reference and support case number.
- Copies of the original message and relevant receipts.
This is an organisational worksheet, not an official report. Keep passwords, one-time codes, identity documents and full financial records out of public comments. Ask the bank how to submit evidence securely.
Where to report a suspicious notification
Interac lists phishing@interac.ca for suspicious messages. Reporting a notification is separate from asking your bank to protect an account or investigate a transaction. For an unfamiliar transfer, its official FAQ advises confirming with the sender and forwarding unconfirmed notifications to that reporting address.
If the message claims a lottery win, our OLG scam-email guide covers checking that claim. If you already paid a supposed prize-release fee, use our Canadian lottery-scam response guide. No checklist can promise recovery. Do not gamble to replace money lost to fraud; responsible-gambling resources are available if gambling is affecting your finances or wellbeing.