Ottawa, July 27: Canadian authorities are warning the public about a widespread smishing campaign in which fraudsters send fake text messages and emails claiming that recipients must urgently renew or replace their provincial health cards.
The Canadian Radio-television and Telecommunications Commission (CRTC) says the scam is affecting consumers across Canada, including Ontario, and is designed to trick people into clicking malicious links or providing sensitive personal information.
The warning follows reports of fraudulent messages claiming that health cards must be updated because of a new “Electronic Health Identification System.” Victims are urged to click a link or respond immediately to avoid losing access to health-care services.
The CRTC emphasized that governments in Canada do not send text messages containing links asking residents to renew or replace health cards, driver’s licences, passports or other government-issued identification.
Officials advise anyone unsure about the status of their health card to check the expiry date on the card itself or contact their provincial or territorial health authority through its official website or service centre.
How the Scam Works
According to the Royal Canadian Mounted Police (RCMP), scammers impersonate the Government of Canada or provincial health agencies and attempt to create a false sense of urgency.
Recipients who click the fraudulent link may be directed to fake websites designed to steal banking information, passwords and other personal data. In some cases, the links can install malicious software on phones or computers without the user’s knowledge.
Cybersecurity experts warn that some of these attacks involve infostealer malware, which silently collects sensitive information such as login credentials, financial information and other personal data over extended periods.
Do Not Reply
Authorities also advise Canadians not to reply to suspicious text messages, even to request removal from a mailing list.
Experts say replying confirms that a phone number is active, increasing the likelihood of future scam attempts. In addition, responding to messages from unknown numbers may disable certain built-in anti-phishing protections available on some smartphones.
How to Protect Yourself
The RCMP and CRTC recommend that Canadians:
- Ignore unsolicited texts or emails requesting personal information.
- Never click links or open attachments in suspicious messages.
- Verify information directly through official government websites or offices.
- Use only contact information published on verified government websites.
- Keep phones, computers and antivirus software fully updated.
- Enable multi-factor authentication (MFA) whenever available to provide an additional layer of account security.
Authorities also advise hovering over website links on computers before clicking to verify that the web address is legitimate and to watch for spelling errors or fake website names designed to resemble official government sites.
Report Suspicious Messages
Anyone who believes they have received a fraudulent message should delete it immediately. Individuals who have provided personal information or believe they have been targeted are encouraged to contact their local police service and report the incident to the Canadian Anti-Fraud Centre.
Officials stress that remaining cautious when receiving unexpected emails or text messages is one of the most effective ways to prevent identity theft, financial fraud and malware infections as cybercriminals continue to target Canadians through increasingly sophisticated phishing and smishing campaigns.