Interac e-Transfer safety for teens: send money without getting scammed

Banking · 8 min read

Interac e-Transfer is how a lot of teen money actually moves in Canada: splitting a pizza, paying a friend back, buying used gear from a marketplace seller, getting paid for a shift a manager settles informally. It feels instant and casual, which is exactly why scams built around it work. The safety rules are not complicated, but they depend on understanding one thing most explainers bury: an e-Transfer has a point of no return, and it arrives earlier than most people think. This guide covers how a transfer really moves, how the two ways of receiving one change the risk, the scams that reach teens, and the setup and response steps checked against Interac and Canadian Anti-Fraud Centre sources on October 22, 2026.

How an e-Transfer actually moves (and where the risk sits)

Start with the fact that surprises people: the money itself never travels by email or text. Interac is explicit that only the payment notification and the deposit instructions move through email or text messages, while the funds move between the sender's and recipient's financial institutions over secure payment networks. More than 300 banks and credit unions in Canada are on the Interac network, and transfers are usually instant, though they can take up to 30 minutes depending on the bank.

That split — secure money movement, ordinary email notification — is where almost every scam lives. A fake notification can look perfect even though no money exists behind it. A real notification can be intercepted if the deposit step is weak. And because the banking part is genuinely secure, a teen can feel safe about the whole process when only half of it deserves that confidence. The habits below protect the half that is actually exposed: the notification, the deposit step, and the moment of pressing send.

Autodeposit vs security question: two different risk profiles

There are two ways to receive an e-Transfer, and they are not equally safe. The table below compares them using Interac's own description of each.

Read the table as a setup instruction. For receiving money — pay from a job, a refund from a friend, a marketplace sale — Autodeposit removes the weakest link, the guessable answer, entirely. For sending, the security-question route has one advantage: before the recipient answers, the transfer can still be cancelled. That window matters, and the next section explains exactly where it closes.

The point of no return: cancel before deposit, never reverse after

Interac's FAQ states it plainly: once a deposit has been made, there is no way to reverse an Interac e-Transfer transaction. The sender has to make arrangements directly with the recipient — which, when the recipient is a scammer, means there is no arrangement to be had. This is the single most important sentence in e-Transfer safety, and it is the one most teen-scale explainers skip.

Before the deposit, the picture is different. A sender can cancel a transfer that has not been accepted yet: log in to online banking, open the transaction or payment history, select the transfer, and use the cancel option. The exact steps vary by financial institution, and the bank or credit union may charge a cancellation fee. If a transfer is never accepted, it expires after 30 days and the money is returned to the sender, again sometimes with a fee deducted.

Two practical consequences follow. First, the minutes before a recipient deposits are the only window where a mistake or a scam can be undone from the sender's side — which is why the response procedure below starts with the bank, not with messaging the other person. Second, sending an e-Transfer deserves the same pause as handing over cash, because functionally that is what it becomes the moment it is deposited.

The scams that reach teens

The unexpected-notification trap. A text or email says money is waiting. Interac's guidance for exactly this moment: confirm with the sender using a different communication method, and if the message is from someone unknown, do not click any links or respond. Interac will never ask for a banking password via email or text, so any message that does is fake by definition. Suspicious messages can be reported to phishing@interac.ca.

The marketplace deposit. A seller insists on an e-Transfer before meeting, or a "buyer" pushes a deposit link as part of a purchase. The defence is the same one Interac gives for online purchases generally: take the same precautions as with cash. Cash rules mean money changes hands when the item does, in person — not hours earlier to a stranger.

The guessable-answer interception. A transfer sent with a security answer like a pet's name, a school, or a favourite team can be claimed by whoever gets to the notification and guesses it — and those answers are exactly what a teen's public social media profile advertises. The answer is part of the lock. If it can be found online, it is not a lock.

The impersonation request. A message that looks like it comes from a friend, a parent, or a coach asks for a transfer right away. The sender's name on a request is not proof of anything. Confirming through a different channel — a call, a different app — takes thirty seconds and defeats the entire setup.

The ten-minute safety setup

Do this once, ideally together at the kitchen table:

1. Open the banking app and register the teen's email address or mobile number for Autodeposit, so incoming money lands directly in the account with no security question involved.
2. For any contact the teen still receives from by security question, replace weak answers. Apply the social-media test: if the answer appears in a profile, a post, or a photo caption, it fails. Pick an answer that exists nowhere online, and share it with senders by a different channel than the transfer itself.
3. Turn on a strong, unique password for the banking login and enable two-factor authentication where the bank offers it. Interac lists both among its core safe-use steps, along with keeping devices updated with the latest software and security patches.
4. Agree on the household rule for unexpected notifications: no clicking, no depositing, no replying until the sender is confirmed through a different communication method.
5. Save the bank's phone number (it is on the back of the debit card) in the teen's phone as "Bank — fraud line," so the first call in a problem is fast.

What success looks like: incoming transfers autodeposit without a question, no security answer in use can be found anywhere on the teen's social media, and the teen can state the unexpected-notification rule and the bank's number without looking either up.

If money already went to a scammer: the first hour

1. Call the bank first. If the transfer has not been deposited yet, the bank can work with the cancel window described above. If it has been deposited, the bank still needs the report on record — transaction problems go to the sender's own financial institution.
2. Gather the evidence while it is fresh: screenshots of the messages, the notification, the transfer confirmation, and the profile or listing involved. The Canadian Anti-Fraud Centre's victim guidance starts with collecting documents, receipts, and copies of emails and texts for exactly this reason.
3. Report it. Report the incident to local police and get a file number, and report to the Canadian Anti-Fraud Centre online through Report Cybercrime and Fraud or by phone at 1-888-495-8501 (Monday to Friday, 10 am to 4:45 pm Eastern).
4. If personal information was shared — passwords, banking details, ID — place flags on the accounts, change the passwords, and, for identity fraud, report to both credit bureaus, Equifax and TransUnion.
5. Refuse the second act. Fraudsters often contact victims again promising to recover the money for a fee. The Anti-Fraud Centre is direct: never send recovery money. A recovery offer after a scam is the scam, continued.

Before you tap send: a five-question decision check

Run these in order. Any "no" means stop.

• Do I actually know this person — not their profile, the person?
• Did I confirm the email or phone number character by character, and, if they have Autodeposit, does the legal name shown match who I expect?
• Would I hand this amount over in cash to this person, in this situation? A deposited e-Transfer is just as final.
• Did this request arrive unexpectedly or with urgency attached? Urgency is a feature of scams, not of friends splitting pizza.
• If a security question is involved, is the answer unguessable — and did I share it through a different channel?

Frequently asked questions

Can an e-Transfer be reversed after the money is deposited? No. Interac states that once a deposit has been made there is no way to reverse the transaction; the sender must deal directly with the recipient. Cancellation is only possible before the transfer is accepted or autodeposited.

Is Autodeposit safer than a security question? For receiving, yes: Autodeposit removes the security question entirely, and Interac specifically notes there is less chance of phishing with it. Its trade-off is on the sending side — an Autodeposit recipient cannot decline a transfer, and a deposit to the wrong person lands instantly.

What happens to a transfer nobody accepts? It expires after 30 days and the money is returned to the sender, sometimes after the sender's bank deducts a fee for the returned payment.

Does Interac ever ask for a banking password by text or email? Never. Interac states it will never ask for a banking password via email or text, so any message asking for one is fraudulent.

General information only — this article is not financial advice. For specific financial questions, talk to a qualified professional.

Next: Debit, prepaid, or cash: how teens in Canada should pay →