6 days ago
Fraudsters are targeting Canadians by text. Here's how to spot a smishing scam
Canadians are being urged to think twice before clicking links in text messages as smishing scams become more sophisticated.
Smishing is a type of fraud in which scammers send text messages posing as businesses, government agencies or even people you know. These texts aim to trick Canadians into opening malicious links or revealing information such as passwords or credit card numbers, with the ultimate goal of stealing personal data and money.
Scammers are becoming more sophisticated and they know that the quickest way to reach people is through their phones, particularly by text message, says Josephine Palumbo, deputy commissioner of the deceptive marketing practices branch at the Competition Bureau.
Over the course of 2025, several federal and policing bodies, including the Competition Bureau, have issued warnings to Canadians that scammers may be targeting them via text messaging.
How smishing attempts are changing
These fraudsters are leveraging artificial intelligence to target victims, Palumbo says. AI can mimic the style and language of a specific person, making the messages especially convincing and confusing for Canadians. Fraudsters are also becoming harder to catch because they use prepaid SIM cards to shield their identities, she adds.
Sam-Pajot Phipps, CEO and co-founder of goConfirm, an identity verification platform, says he's seeing more smishing attempts tied to traffic, speeding and parking tickets, often with links to 'pay a fine.' Other common scams include fake job applications or impersonations of subscription services like Netflix or Amazon, claiming there has been a log-in attempt and asking recipients to verify their credentials.
Some messages are even more subtle, simply saying, 'Hey, how are you?' or 'Is this Julie? (or some other name)' These are tactics to test whether a number is active and worth targeting again in the future, Phipps says. If recipients engage, the conversation can eventually lead to a request for money or personal information.
Many texts use short codes, which are five- or six-digit numbers instead of the usual 10-digit phone number, he adds. While these short codes are legitimately used by trusted services, scammers can sometimes gain access to them, making their messages harder to detect as fraudulent.
Fraudsters also 'lean into that urgency on text messages to get people's attention,' Phipps says. For example, a text may say that a fine or bill needs to be paid within 24 hours.
We're too trusting by Corvese, senior manager for digital forensics and incident response, Doane Grant Thornton
Canadians need to be more alert and suspicious, says Stephanie Corvese, senior manager for digital forensics and incident response at Doane Grant Thornton.
'We're too trusting by nature,' she said. 'The advice I always give to everyone is don't be trusting anymore.'
What to do if you get a suspicious text
Pause before taking any action when you receive a message requesting it, Corvese says. If you google the phone number or message content, you'll often find that the number texting isn't associated with the organization it claims to be, and there may be subtle errors in the email address, if one is provided, she adds.
If you receive a suspicious text message, remember that most legitimate organizations will never ask you to reveal personal information through email or text, Palumbo says. If you're unsure, contact the sender using a different, verified method.
Palumbo advises Canadians to avoid clicking on any suspicious links. If something doesn't look right, don't click on it, she says. And, if you suspect a smishing attempt, don't reply. This includes ignoring texts that ask you to respond with 'STOP' or 'NO.' Instead, block the number and delete the message.
Users can also report spam texts by forwarding them to 7726 (SPAM), which helps cellular providers investigate further.
"Remember that knowledge is the best shield to protect yourself, your family, and your friends from fraud of this kind,' Palumbo said.
