Interac e-Transfer Scams You Need to Know About for 2026

Interac e-Transfer processed more than 1.6 billion transactions last year, and growth has not slowed in 2026. That scale continues to attract fraudsters, and the scripts they run are evolving. Fake notification emails are more polished, interception fraud has surged, and new players on the Interac network are being impersonated before most Canadians even know the brands.

If you run a small business and get paid by e-Transfer, the stakes are higher: a single compromised payment can wipe out a week's income, and fraud losses get messier once you are tracking revenue against the $30,000 GST/HST threshold. Knowing your bank's limits (see our complete guide to e-Transfer limits by bank) also helps you spot transfers that exceed normal caps — a common red flag.

If you already read our evergreen guide to e-Transfer scams, this post is the 2026 update: what is new, what is spreading, and what to watch for this year specifically.

1. Fake Notifications with Attachments (FCNB Alert)

New Brunswick's Financial and Consumer Services Commission (FCNB) has an active fraud alert about phishing emails disguised as Interac e-Transfer notifications. The twist: these messages include attachments that either harvest your banking credentials through a fake login page or install malware on your device.

The warning applies well beyond New Brunswick. The same templates are circulating across the country.

2. Interception Fraud Is the Fastest-Growing Threat

Interception fraud does not rely on you clicking anything. The scammer steals your personal information from a data breach, a social media post, or an earlier phishing round. Then they guess the security question on a pending e-Transfer you were supposed to receive and redirect the money into their own account.

Major Canadian banks including CIBC, Simplii, and TD have published warnings about interception fraud as a growing trend. It is particularly damaging because:

• The real sender thinks they sent the money to the right person — they did not do anything wrong.
• The real recipient never sees the notification, because it was deposited before they tried to accept it.
• Once the money is gone, recovering it depends on how quickly the sender's bank can act.

The only reliable defence: Autodeposit

With Interac Autodeposit enabled, incoming transfers land in your account automatically. No security question is ever used, which means there is nothing for a scammer to intercept. This single setting neutralizes the entire interception-fraud category. Autodeposit is supported by every major Canadian bank — see our per-bank breakdowns for RBC, TD, and CIBC for setup specifics.

If Autodeposit is off (for example, because you run a business account that needs manual review), use a strong security question that is not guessable from public information: not a pet's name, not a city, not a birthday. Share the answer with the sender through a separate channel, like a phone call.

3. Fintech Impersonation (Wealthsimple, Neo, and More)

Two quiet but important things changed in 2026. First, Neo Financial joined Interac e-Transfer as a Participant, becoming the second Canadian fintech on the network after Wealthsimple (which joined in 2023). Second, Interac broadened access for qualified Payment Service Providers, which means more fintech brands are expected to plug in directly.

This is good for consumers. It is also a likely vector for scammers. New brand names on the network mean new phishing templates to design, and most Canadians have not yet built intuition for what a legitimate e-Transfer from these fintechs looks like. Be wary of:

• Emails claiming to be from a fintech-branded transfer service you do not recognize.
• Text messages claiming a fintech has sent you money and linking to a login page.
• Lookalike domains that are close to, but not exactly, the fintech's real domain — a single swapped character is enough.

The defence has not changed: if you have Autodeposit enabled, a real e-Transfer will land directly in your account. Otherwise, open your banking app and check for a pending transfer — never click a deposit link from the email itself. (For a head-to-head comparison of send fees across the big Canadian banks, see our 2026 e-Transfer fees guide.)

4. Prepaid Card "Return the Funds" Scams

In April 2026, REV Prepaid launched the first outbound Interac e-Transfer capability for Canadian corporate prepaid cards. Legitimate and useful — but it widens the surface area for a classic scam type we already see with conventional accounts: the "return the funds" reversal.

How the pattern typically plays out: you receive an unexpected e-Transfer. Shortly after, the "sender" contacts you claiming it was a mistake and asks you to return the money by e-Transfer. You return it. Then the original transaction is reversed or flagged by the sending institution, and you are out the amount you sent back. The newly-available prepaid card outbound capability makes this easier to spin up from disposable funding sources.

If you get an unexpected payment from a prepaid card or any source you do not recognize:

1. Do not send anything back by e-Transfer.
2. Contact your bank. They can reverse legitimate mistaken payments through proper channels.
3. Let the bank communicate with the sender's institution — never with the sender directly.

5. CRA Refund Texts (Still Going Strong)

This is not new, but 2026 tax season brought another surge. The message claims the Canada Revenue Agency is issuing you a refund or benefit payment by Interac e-Transfer, with a link to "deposit" it.

The CRA does not use Interac e-Transfer. Every single CRA e-Transfer message is a scam. The agency pays by cheque or direct deposit, full stop. If you receive one, forward it to phishing@interac.ca and report it through the CRA's scam reporting page.

2026 Red Flags Cheat Sheet

What to Do If You Have Been Scammed

1. Call your bank's fraud line immediately — the number on the back of your debit card. Speed is everything with interception and phishing scams.
2. Change your banking password and any other account that reuses it.
3. Report to the Canadian Anti-Fraud Centre at 1-888-495-8501 or online.
4. Forward the scam email to phishing@interac.ca so Interac's security team can take down the infrastructure.
5. File a local police report — even if you do not expect recovery, it supports broader investigations.
6. Enable Autodeposit on every account where it is not already on, to close off interception fraud for the future.

Frequently Asked Questions

What is Interac e-Transfer interception fraud?

Interception fraud happens when a scammer uses personal information stolen from a data breach or social media to guess the security question on a pending e-Transfer. If they answer correctly before the real recipient does, the money gets deposited into the scammer's account instead. Enabling Autodeposit eliminates this risk because no security question is ever used.

Do real Interac e-Transfer emails ever include attachments?

No. Interac e-Transfer notification emails never include attachments. If you receive an email claiming to be an e-Transfer with a PDF, HTML file, or any other attachment, it is a phishing attempt. Do not open it. Delete the message and forward the original to phishing@interac.ca.

Can Interac e-Transfers come from fintech companies like Wealthsimple or Neo Financial?

Yes. As of 2026, both Wealthsimple and Neo Financial are direct Participants in the Interac e-Transfer network, and others are expected to join under the expanded Payment Service Provider rules. A real transfer from one of these fintechs will still come from notify@payments.interac.ca and will show up in your bank's app. Scammers are already using the novelty of these brand names to trick people into clicking links, so verify every transfer in your banking app, regardless of who appears to be sending it.

What is the FCNB warning about fake Interac e-Transfer notifications?

New Brunswick's Financial and Consumer Services Commission (FCNB) has an active fraud alert about phishing emails disguised as Interac e-Transfer notifications. The messages try to steal banking credentials or install malware via attachments. The guidance applies across Canada: never open attachments in e-Transfer emails, and never follow deposit links from your inbox.

Where do I report an Interac e-Transfer scam in 2026?

Forward suspicious emails to phishing@interac.ca. Report the fraud to the Canadian Anti-Fraud Centre at 1-888-495-8501 or online at antifraudcentre.ca. If money was lost or your banking credentials were exposed, contact your bank's fraud department immediately and file a local police report.

Is there an older guide with more background on each scam?

Yes — our main Interac e-Transfer scams guide covers the evergreen patterns (Facebook Marketplace, phishing, CRA impersonation, Gigadat) in more depth. This 2026 update focuses on what is new or escalating this year.

The information on this page is for general informational purposes only and does not constitute financial, legal, or tax advice. While we strive to keep this content accurate and up to date, we make no guarantees about its completeness or reliability. Always consult your bank, a qualified professional, or the relevant authority for advice specific to your situation. Last updated April 2026.