Yes, criminals can steal banking information or intercept funds from an e-transfer, but it usually requires them to hack your email, guess a weak security password, or trick you with a phishing scam. While the transfer itself is secure, scammers often use fraudulent links to steal login credentials or intercept notifications.
Interac e-Transfer interception fraud is a growing trend. By using stolen personal information and guessing security answers correctly, fraudsters can divert and deposit e-Transfer transactions to their accounts. Protect your accounts by understanding your responsibilities as a sender and recipient.
Anyone can fall victim to fraud or a scam. Criminals often pretend to be a real organisation or person – and are always coming up with new ways to cheat people out of their money. The most common scam is known as a 'authorised push payment' (APP) or a 'bank transfer' scam.
As one of the world's safest digital money transfer services, Interac e-Transfer offers Canadians the bank-grade security they expect. The transfer happens over secure payment networks that banks use. Money never travels by email or text (only the payment notification and deposit instructions do).
Here are some of the most secure payment methods available online:
In response to customer inquiries, they can trace payments, view a customer's transaction history and access payment details. They cannot, however, access any memos attached to an Interac e-Transfer.
Your bank account number alone is not enough for someone to withdraw money from your account. Scammers can use your bank account and routing number to commit ACH fraud, make online purchases, deposit money for illegal activities, and create fraudulent checks.
Credential phishing: Of all methods, this is the most common attack method. Hackers create highly convincing fake login pages of bank account pages—and share links through SMS, email, or social media messages.
Scammers can leverage your bank details and address to perpetrate identity theft. Armed with this information, they can apply for credit cards or loans in your name, potentially leaving you with significant financial obligations.
Many of these criminals get around ID verification and user authentication by hacking into an existing user's account, sometimes even intercepting (and redirecting) a transfer in progress. To do this, fraudsters typically perform account takeover fraud, gaining access to other users' accounts and transactions.
If you call (which you should not do) the scammers ask for remote access to your computer, install spyware, and drain money from your bank account. What to do: If you think the message might be legitimate, contact the company through their official app, website, chat, or customer service phone number.
Yes, banks can refund scammed money, but it depends heavily on the payment method, how quickly you report it, and if the transaction was truly "unauthorized" (someone stole your login) versus you being tricked into sending it (authorized push payment). You're more likely to get a refund for unauthorized card charges or bank transfers if reported fast, but it's harder for Zelle, wire transfers, or gift cards, though filing a formal dispute or complaint with agencies like the Consumer Financial Protection Bureau (CFPB) can help.
Be familiar with signs of a compromise.
Check your account for any unauthorized transactions, including withdrawals and scheduled or recent transfers. You should also be on the lookout for address changes, failed login attempts, or password resets.
Receiving a wire transfer from a stranger is generally safe as long as you don't provide sensitive information. That said, be cautious of scams where someone overpays you and asks for a refund.
Wire Transfers
A wire transfer is another name for a bank-to-bank transfer. This is the most common way of making a transfer especially if the amount is large, or it is an international transfer. A wire transfer is a secure option as your bank or financial institution verifies that the funds are available to be sent.
If you're hacked, the very first thing is to secure your primary accounts (email, banking) by changing passwords immediately and enabling Multi-Factor Authentication (MFA), then disconnect the compromised device from the internet to stop data flow and run a full virus scan, as hackers often use one breach to access many services.
Fraudsters will often ask you to pay for goods and services by bank transfer. This is because they know that it makes it harder to recover the money. You could be dealing with a scammer if they won't let you pay by card or any other way that protects your money, like PayPal goods and services.
ATM skimming: ATM skimming is a type of fraud where thieves attach a device to an ATM to steal your card information. Once they obtain your card number and PIN, they use this information to withdraw money or make purchases.
With the right habits and tools in place, you can make your bank account significantly harder for hackers to access and help prevent identity theft.
HMRC can check your bank accounts without your explicit permission. While this may sound alarming, there are safeguards in place to protect your information. But if HMRC feel they have probable cause to investigate, they can check documents like your bank records directly with the third-party.
Interac e-Transfer interception occurs when a fraudster redirects a real money transfer to their account and deposits your money. Interception can happen when your email has been hacked. Fraudsters can get your personal and account information by sending texts or emails that appear to be from legitimate sources.
How to recognize a fake Interac e-Transfer notification. Fake Interac e-Transfer notifications may include one or more of the following characteristics: Attachments: Interac does not send email attachments with their e-transfer notifications. If the email has attachments, it is fraudulent.
The recipient receives an email notifying them of the transfer and, once they correctly answer the security question, they can deposit the money to any Canadian-dollar bank account held at a Canadian financial institution.