Canada benefit survey scams: how to verify a message
- Canada Benefit Scam
- Phishing
- Government Impersonation
- Identity Theft
An unexpected message offering money for a government survey deserves an independent check before you provide information. Identify the agency it claims to represent and verify the request through that agency's official contact route. A message's logo, greeting or promised payment cannot establish who sent it.
Correction, 8 September 2026: The earlier version claimed $1.5 million in losses, 7,000 victims and a 48-hour campaign without sources substantiating those figures. We have removed that incident account, including unsupported police and demographic claims. This page now provides educational guidance, with the example below clearly labelled fictional. Its original publication date and URL are retained; the older claim remains in the URL only to preserve existing links.
Check which agency is contacting you
The Canada Revenue Agency's scam guidance explains its actual contact practices. The CRA does not send refunds or payments by text or e-transfer, and its emails do not ask you to enter personal or financial information through a link. It can legitimately contact people in other circumstances, so avoid a blanket rule that every unexpected government message is fraudulent.
If the message claims to concern a CRA benefit, open a known official CRA page yourself and use its account or contact options. Ask about the specific request without using the phone number or sign-in link supplied in the suspicious message.
Genuine surveys can arrive by email or text
Statistics Canada's survey FAQ says it contacts participants through several methods, including letters, telephone, email and text. It explains how to verify a survey using its published survey information and contact details.
The FAQ also says Statistics Canada employees do not request Social Insurance Numbers, banking information or credit-card details. That is an agency-specific safeguard. It should not be stretched into a claim that every government service follows identical information requirements.
Ask for the survey's name, then verify it independently. You can pause the conversation while you check; completing the sender's form is not necessary to establish whether the request is genuine.
Use the actual website address
Our earlier statement that all genuine Canadian government websites end in .gc.ca was incorrect. The CRA identifies canada.ca, .gc.ca addresses and some exceptions. A suffix alone is not a universal authenticity test.
Type a known official address yourself and navigate from there. Check the hostname, not just familiar words elsewhere in a long address. For example, canada.ca.survey-reward.invalid is a fictional, reserved example whose hostname is not canada.ca.
A fictional survey-payment example
Fictional example for practice: “Your benefit survey reward is ready. Complete this form today and enter your banking password to receive the payment.” This is an invented teaching example, not a quoted government warning or evidence of a particular campaign.
Work through three questions before taking any action:
- Who supposedly sent it? “Government benefits” is too vague to identify the responsible agency. Find the named organisation through a source you already trust.
- What action does it demand? A request for a banking password creates a very different risk from an ordinary survey question. Keep passwords and security codes out of replies and unfamiliar forms.
- Can the request be verified independently? Check the agency's published instructions. A deadline inside the message is not a reason to skip that step.
Correct spelling or a personalised greeting would not resolve these questions. You can use Scam Checker's message check to look for warning signs, but a low-signal result cannot authenticate the sender or guarantee that a survey is legitimate.
If you already shared information or paid
The Canadian Anti-Fraud Centre's recovery guidance recommends gathering evidence, contacting the relevant financial institution and reporting fraud. Keep the message, dates, receipts and transaction details where available.
Tell your bank exactly what you shared or paid. Sharing personal or banking information creates fraud risks, but it does not establish that someone automatically has unrestricted account access. If you disclosed a password, change it through the genuine service and address any accounts where you reused it. Ask the affected organisation what additional protection is appropriate for your situation.
Use the CAFC reporting page for its current online and telephone reporting options. It accepts reports from victims and witnesses; victims should also contact local police. Reporting does not guarantee recovery. Our after-a-scam checklist can help organise the next steps alongside Canadian official advice.
About this correction
Sam prepared this AI-assisted educational revision for Scam Checker using the official sources linked above, reviewed on 8 September 2026. We have also corrected the earlier guaranteed-bank-access wording and added Canadian reporting information. This page does not establish a new outbreak, a victim count or the legitimacy of an individual message.