Real or fake
Who actually contacts you, and how
The CRA, Canada Post, Service Canada and five more - what each one says it really does, and what it says it never does. Taken from their own pages, not ours.
Most of them really do text you
The usual advice is that governments and couriers never text. That is wrong for five of the eight below, and believing it hurts you twice: you delete real messages, and you still trust a good fake. What separates a real message from a fake one is not the channel it arrives on - it is what the message asks you to do.
Canada Revenue Agency
The CRA texts you for exactly one reason: a sign-in security code. Never to tell you about a refund.
What it really does
- Texts you a one-time passcode when you sign in - and only if you chose the phone option.
- Calls you. A real employee gives you their name and a phone number to call back.
- Emails you to say there is new mail waiting in your CRA account - if you signed up for notifications.
- Writes to you by letter.
What it says it never does
- Sends refunds or payments by electronic transfer or text message.
- Sends texts or emails about benefits or tax credits with a link to click.
- Calls and asks you to read out your one-time passcode.
- Demands payment in gift cards, cryptocurrency or prepaid credit cards.
- Threatens to have you arrested, imprisoned or deported.
Their own words: CRA - Recognize a scam 2026-08-06 CRA - Multi-factor authentication 2026-06-24
Service Canada
A permanent SIN does not expire, and no SIN is ever "suspended". Any call saying otherwise is a scam - Service Canada says so itself.
What it really does
- Texts you a security code when you are signing in - that is the only thing it texts.
- Mails official documents in a beige or white envelope carrying the official Canada wordmark.
- Calls you back after you submit a service request yourself.
- Mails you a Personal Access Code on paper when you register for My Service Canada Account.
What it says it never does
- Asks you for personal information by phone, text message or email.
- Asks for your My Service Canada Account password, by any means.
- Leaves personal information on an answering machine.
- Calls to say your SIN was used in a crime or is being suspended. The government says itself that this call is false.
Their own words: Service Canada - Scam and fraud prevention 2026-02-27 Service Canada - Protect yourself from scams and fraud 2025-12-19 Service Canada - Social Insurance Number 2026-09-04
Canada Post
A missed delivery is announced by a card at your door - not by a surprise text.
What it really does
- Leaves a physical Delivery Notice Card at the door or in the mailbox when it misses you.
- Texts about tracking from two short codes - and only if you signed up yourself.
- Does email or text you about duty and taxes owing on a parcel - but only if you opted in first.
- Attaches the itemized customs breakdown to the package itself, as a paper form.
What it says it never does
- Emails or texts you asking for credit card details, banking information, passwords or account logins.
- Charges you a fee to track a delivery.
- Holds a parcel for unpaid shipping fees and texts you a link to pay. Canada Post names that exact message as fraud.
- Emails you at all unless you asked it to.
Their own words: Canada Post - What to do if you get a suspicious email no date shown Canada Post - Delivery notifications 2022-09-16
Purolator
Purolator really does text you about deliveries, and those texts really do contain links. The link is not the tell - what it asks for is.
What it really does
- Sends automatic delivery updates by text to the mobile number given with the shipment.
- Puts a link in those texts - clicking it is the normal way to use the service.
- Emails delay and delivery notifications, if you or the shipper signed up for them.
- Leaves a paper card at the door after a missed delivery, and holds the parcel five business days.
What it says it never does
- Requests credit card details, banking information, account information or money transfers by email, text or phone.
- Asks for a wire or electronic money transfer so a shipment can be delivered.
- Texts you a link to confirm your address details. Purolator names that message as not from them.
Their own words: Purolator - Customer alert: fraudulent text messages 2025-06-05 Purolator - Purolator Your Way FAQ no date shown
407 ETR
407 ETR does send payment reminder texts. A real one comes from a six-digit short code and has your name in it.
What it really does
- Sends payment reminder texts from an official six-digit short code, with your name in the message.
- Makes automated reminder calls that ask you nothing and tell you to log in to your account.
- Sends your bill by email instead of on paper, depending on your billing preference.
- Sends paper letters from time to time.
What it says it never does
- Asks for personal information such as passwords, PINs or credit card numbers, on any channel.
- Uses urgent or threatening language to force an immediate payment.
- Links to a website other than 407etr.com, or takes payment anywhere but 407etr.com and its official app.
Their own words: 407 ETR - Fraud awareness no date shown 407 ETR - Fraud Prevention Month tips 2026-03-05
ServiceOntario
ServiceOntario does text renewal reminders. A real one never contains your health card or licence number.
What it really does
- Texts and emails renewal reminders for a licence plate, driver's licence, health card or Ontario Photo Card.
- Sends those reminders 60 days and 30 days before the expiry date.
- Uses a full Ontario.ca or ServiceOntario.ca address for any link in a genuine reminder.
- Still mails paper notices to some groups, including everyone 16 and under and everyone 70 and over.
What it says it never does
- Puts your date of birth, health card number or driver's licence number in a reminder.
- Asks for payment by email, text message or phone call.
- Tells you something is wrong and asks you to call a number or click a link.
- Threatens to report a fee or fine to the police, a bank or a collection agency.
Their own words: ServiceOntario - Get renewal reminders 2026-09-11 Government of Ontario - Identify a scam or fraud 2026-06-30
SAAQ
The SAAQ does not text or email you about your file, money, or personal information. Its alerts only say a message is waiting.
What it really does
- Mails your documents, unless you turned on online delivery in SAAQclic.
- Emails an alert when a new communication is placed in your SAAQclic account.
- Answers by secure email a question you submitted through its own online form.
- Mails you a secure identifier on paper if you cannot supply the reference numbers when setting up an account.
What it says it never does
- Sends texts or emails about personal information in your file, money transfers, or payments.
- Contacts you by text message about an overcharge or a refund owed to you.
Their own words: SAAQ - Protecting personal information 2024-06-07 SAAQ - Phishing alert 2024-12-09
Revenu Québec
Revenu Québec can text you that something changed - but never what changed, and never about money.
What it really does
- Texts you that something changed in your file, if you signed up - with no details in the message.
- Emails you to say a new document is waiting in My Account, if you chose online-only documents.
- Mails your documents on paper by default, including your notice of assessment.
- Exchanges secure email with you, but only after you asked for it by phone or in writing.
What it says it never does
- Puts a hyperlink in an email or text notification - a real one never contains one.
- Tells you about a payment, a refund or a money transfer by email or text message.
- Asks for personal information by email or text message.
- States by email or text what kind of change was made to your file.
- Emails or texts you to say your income tax return was not received.
Their own words: Revenu Québec - Communications policy 2024-11-04
How this page was built
Every line traces to a page the institution publishes about itself. News coverage, police bulletins and security-company blogs were not used, because only an institution can say what it does. Where a page shows a date, we print it; where it does not, we say so rather than implying it is current.
Practices change, and a page can be edited after we read it. Treat this as a starting point, not the last word - and when a message asks you for money, credentials or personal details, stop and reach the institution yourself using a number or address you already had.