The top holiday scams in Canada follow the same playbook every year: fake Black Friday deals, bogus delivery alerts, gift-card traps, and charity fraud that spike from late November through January. Spotting the pattern early protects your money, cards, and identity. Investigation Hotline is a licensed Ontario firm; when a seasonal scam becomes identity theft or needs evidence for counsel, our digital investigations team can help document what happened.
Why do holiday scams spike every year?
Holiday shopping creates urgency, rushed payments, and a flood of shipping emails. Scammers copy retailer brands, carriers, and charities because people expect those messages in November and December. The Canadian Anti-Fraud Centre consistently reports higher volumes of phishing, online shopping fraud, and charity impersonation in the season. Pressure to “act now,” unusual payment methods (gift cards, crypto, wire), and links that do not match the real company domain are the common thread. For a general fraud checklist that applies year-round, see our guide to 10 warning signs of fraud and scams in Canada.
What are the top 10 holiday scams to watch for?
These ten schemes show up repeatedly around Black Friday, Cyber Monday, and the December rush. Related seasonal patterns are also covered in unmasking Christmas scams and our Christmas safety tips from a private investigator.
1. Fake Black Friday and Cyber Monday deals
Clone sites mimic big-box and online retailers with prices that are too deep to be real. You enter card details on a lookalike checkout, or the “order” never arrives after a prepaid transfer. Stick to retailers you already trust, type the URL yourself, and compare spelling, checkout security (HTTPS), and return policies before you pay. If a deal only works through a random DM or a redirected short link, treat it as hostile.
2. “Free” gadget and Apple Watch coupon traps
Giant “free device” promotions usually harvest emails, phone numbers, and survey answers that get sold or used in later phishing. Legitimate brands do not require a long personal questionnaire for a free flagship watch. Close the tab, do not enter a SIN or banking password, and ignore follow-up calls that claim you “won” something you never entered.
3. Fake postal and courier delivery alerts
Texts and emails that mimic Canada Post, UPS, FedEx, or Purolator ask you to “confirm” an address or pay a small customs fee. The link leads to a credential-harvesting page. Open tracking only inside the carrier’s official app or by typing the known website yourself. Never call a number inside a suspicious SMS; use the number on the company’s real site. This pattern overlaps heavily with classic phishing scams.
4. Fake refund and “wrong charge” messages
Messages claiming a hotel, Amazon, airline, or retailer charged you by mistake push you to click a “refund” button. The page may install malware, ask for remote access, or steal one-time codes. Real refunds start from your bank statement or the retailer’s logged-in account, not from an unexpected email with a deadline.
5. Malicious holiday e-cards and attachments
Festive greetings can carry malware, especially on work devices. Do not open unexpected .zip, .html, or odd card links from unknown senders. If a colleague’s name appears but the tone is off, verify by a separate channel before clicking.
6. Fake gift-card and retailer giveaways
Social posts promising large Best Buy, Amazon, or retail cards to the “first 20,000 winners” usually sell your data or push malware installs. Real brands do not DM random winners asking for shipping fees paid by gift card. Report the post, do not engage, and warn family members who shop mainly on social apps.
7. Charity tricksters and fake donation pages
Giving season brings lookalike charity sites and door-to-door or phone pitches. Donate only through charities you already know, confirm registration, and prefer official portals over cash, gift cards, or crypto. If someone pressures you to decide in the next five minutes, pause and verify independently.
8. DM sales after you post about gifts
After you mention a toy, phone, or console online, strangers may message “deals” or “I have extras.” Upfront payment to an unknown person with no receipt trail is a red flag. Use established marketplaces with buyer protection, or buy in store. Romance and social trust angles can escalate into longer catfishing patterns if the chat continues for weeks.
9. Extra holiday money and work-from-home fraud
Offers of easy seasonal income that ask for your SIN, direct-deposit details, or “package reshipping” can turn into identity theft or money-mule schemes. Walk away from vague “easy cash” pitches. If your SIN or banking data may already be exposed, read our guide on identity theft in Canada and contact your bank and credit bureaus promptly.
10. Evil twin Wi-Fi at malls and airports
Fake public hotspots copy mall or cafe network names and capture logins or card numbers. Avoid entering payment details on open Wi-Fi. Use mobile data or a trusted VPN for banking and checkout while travelling for holiday visits.
How can you spot holiday fraud warning signs faster?
Four signals appear in almost every successful seasonal scam: urgency (“account locked in 2 hours”), a mismatched sender domain, a request for remote access or one-time codes, and payment by gift card, wire, or crypto. Hover over links before clicking. Call the company using a number from your statement or their official site, not from the message. Keep screenshots of the email header, SMS, and payment confirmation if money already moved. Report suspected scams to the Canadian Anti-Fraud Centre and your financial institution when cards or accounts are involved.
What should you do if you already clicked or paid?
- Stop further contact with the scammer and do not send more money to “recover” funds.
- Change passwords from a clean device; enable multi-factor authentication on email and banking.
- Call your bank or card issuer to freeze cards and dispute unauthorized charges.
- Report to police if money was stolen, and file with the Canadian Anti-Fraud Centre.
- Preserve evidence: emails, texts, usernames, wallet addresses, and shipping details.
Household safety around packages, porch theft, and travel also matters during the season. See the hidden dangers of Christmas for related physical-security points.
When should you call a private investigator about a holiday scam?
Call police for active crimes and immediate danger. A licensed private investigator is useful when you need sustained, lawful follow-up: tracing who runs a fake storefront, documenting social accounts for counsel, verifying whether a “charity” or seller is legitimate, or supporting an identity-theft file with timelines and open-source evidence. Investigation Hotline has handled fraud-related and digital cases across Toronto, the GTA, and Ontario since 1988 under founder Mitchell Dubros. We do not replace your bank or the police; we add investigative depth when reporting alone is not enough.
Holiday scam FAQs
Are gift-card payments ever safe for online deals?
Almost never with a stranger. Gift cards are hard to reverse. Legitimate major retailers take card or platform checkout, not “buy a card and text the code.”
How do I verify a Canada Post delivery text?
Do not use the link in the text. Open the official Canada Post app or website, sign in, and check tracking there. The same rule applies to UPS and FedEx.
Can a private investigator recover money lost to a scam?
Investigators gather evidence and identify leads; they cannot guarantee recovery. Banks, platforms, and police control freezes and prosecutions. Early documentation still improves your odds with each of those parties.
Need help after a holiday scam in Ontario?
If you were targeted by holiday shopping fraud, phishing, or suspected identity misuse, Investigation Hotline can review what happened and outline next investigative steps. Call (416) 205-9114 or use our contact page for a confidential consultation.
To learn more, contact Investigation Hotline at
