Rules
Scam calls and texts in Canada, how CRTC rules and the do not call list work
Scam verification in Canada: how CRTC telemarketing rules, caller ID spoofing enforcement and the National Do Not Call List work, and how to report a scam call.
What to take away
- Scam verification starts with knowing who actually has power over a call: the CRTC writes telemarketing rules, but it does not block individual numbers for you.
- Caller ID spoofing enforcement is real but slow, and it usually targets carriers and platforms rather than the person who called you.
- The National Do Not Call List reduces some legitimate telemarketing, yet most scam calls ignore it because the callers are already breaking the law.
- Report to the Canadian Anti-Fraud Centre for intelligence, your telecom provider for network-level action, and police when money or threats are involved.
- Keep the number, time, and wording of the call. That record is what makes any later verification possible.
How CRTC telemarketing rules apply to scam calls
The CRTC is the federal regulator for telecommunications in Canada. Its telemarketing rules sit in the Unsolicited Telecommunications Rules, which cover when a telemarketer may call, what it must identify, and when it must honour a do not call request.
Those rules bind legitimate telemarketers. A scam caller in another country, or one using a hijacked Canadian number, is not filing a compliance report with anyone.
The practical value of the rules is indirect. They give the CRTC grounds to fine companies that break them, and they define what a lawful call looks like so you can spot the difference.
A lawful telemarketing call must identify the organization, tell you it is a sales call, and give you a way to reach it. A scam call usually refuses all three.
If a caller claims to be from Service Canada about your SIN, or from a bank about a compromised account, that is not telemarketing. It is impersonation, and the CRTC rules are not the main tool for it.
Where the call involves your personal information being mishandled, the Office of the Privacy Commissioner of Canada takes complaints under PIPEDA, and you can report a privacy concern directly to the OPC. Quebec Law 25, Alberta PIPA and BC PIPA add provincial layers for organizations operating there.
For the statutes behind these bodies, the Consolidated Acts index on the Justice Canada site is the place to look up the Telecommunications Act and related law.
Caller ID spoofing: what the CRTC can and cannot enforce
Caller ID spoofing means displaying a number that is not the one actually dialling. Scammers use it to make an overseas call look local, or to impersonate a bank, police service or government line.
The CRTC has taken action on spoofing through its STIR/SHAKEN framework. That system lets carriers sign and verify calls so a receiving network can tell whether the displayed number is genuine.
What the CRTC cannot do is trace and punish the individual scammer behind every call. Most scam operations sit outside Canadian jurisdiction, and the number you see is often a real Canadian number that has been copied.
Enforcement therefore lands on carriers and platforms. The CRTC can require telecom providers to block or label calls that fail authentication, and it can act against providers that fail to comply.
This is why your phone may show a warning label on some calls and nothing on others. Authentication only works when both ends of the call support it.
For you, the limit is simple: a displayed Canadian number proves nothing. Treat an unexpected call about money, accounts or identity documents as unverified until you call back on a number you looked up yourself.
If the call pushes you toward a link or a message, the same caution applies as with phishing scams. The channel changes, the goal does not.
The National Do Not Call List: registration and limits
The National Do Not Call List is run by the CRTC. You register your residential, mobile or VoIP number, and it stays on the list until you remove it or the number is reassigned.
Registration is free. You can add a number online or by phone, and it takes effect quickly, though the CRTC allows telemarketers a short window to update their own lists before complaints count.
Being on the list does not stop all calls. Charities, political parties, survey firms, and businesses with an existing relationship with you are exempt.
Scam callers ignore the list entirely. They are not checking it, and a scam call is evidence of nothing except that your number is in circulation.
The list still has value. It cuts down lawful telemarketing volume, and each unwanted call that should not have happened becomes a documented complaint the CRTC can act on.
When you file a do not call complaint, give the exact date, time and number, plus the company name if one was given. Vague complaints are hard to pursue.
Telemarketing rules in Canada also cover calling times and automatic dialling systems. A call at an unreasonable hour from a live agent is a rule breach, whether or not the list is involved.
Reporting a scam call or text from any Canadian city
Reporting works the same whether you are in Toronto, Montreal, Halifax, Winnipeg, Calgary or a rural area. The receiving body is federal or provider-level, not municipal.
Follow these steps.
- Do not engage further. Hang up, and do not reply to a scam text or click any link in it.
- Capture the evidence. Save the number, the time, the exact wording, and a screenshot of the text before you delete anything.
- Report to the Canadian Anti-Fraud Centre. Its online reporting tool takes the details and feeds national intelligence, even when no money was lost.
- Report to your telecom provider. Most carriers have a spam or fraud reporting short code or web form, and they can act on numbers hitting their network.
- Report to police if you sent money, gave identity documents, or received threats. Local police handle the criminal file; the CAFC does not investigate individual cases.
For texts, forward the message to the short code your carrier publishes for spam, then delete it. Do not forward it to friends as a warning without stripping your own number.
If the message pretends to be a delivery notice, a bank alert or a government refund, it is worth running it against a phishing scams checklist before you decide what it wanted.
What the Canadian Anti-Fraud Centre adds to a CRTC report
The Canadian Anti-Fraud Centre is the national intake point for fraud and cybercrime reports. The RCMP, the Competition Bureau and the Ontario Provincial Police operate it together.
The CAFC does not investigate your case or recover your money. It collects reports and produces the trend data that police, regulators and banks use to spot campaigns.
That distinction matters when you decide where to spend your time. A CAFC report is intelligence. A police report is a case file. A CRTC complaint is a regulatory record.
File with the CAFC even if you lost nothing. Volume is what moves a scam pattern onto the radar, and a wave of reports about one number is more useful than a single detailed account.
What you get back is limited. You may receive a reference number, and you will not usually hear more unless a broader investigation touches your report.
For a fuller picture of what the centre does with your submission, see this guide to the Canadian Anti-Fraud Centre report process.
If your identity documents or SIN were exposed, add a report to the OPC where a private organization mishandled your data, and contact Service Canada about the SIN itself.
The Canadian Centre for Cyber Security handles cyber incidents affecting systems rather than consumer fraud, so a scam text normally does not belong there.
Provincial police and telecom provider routes
Policing in Canada is layered. The RCMP covers federal matters and contracts with some provinces and territories, while provincial and municipal forces handle most criminal complaints.
In Saskatchewan, the province's justice, crime and the law pages set out how residents report crime and where consumer protection sits. British Columbia routes similar guidance through its public safety and emergency services pages.
Ontario, Quebec, Alberta, Manitoba and Nova Scotia each have their own provincial police or municipal reporting structures, plus consumer protection offices for marketplace fraud.
For federal policing and emergency guidance in one place, the Government of Canada's policing, justice and emergencies portal links the relevant services.
Your telecom provider is often the fastest route for a number that keeps calling. Carriers can block or label numbers at the network level, and they share data with each other.
Providers cannot recover money and cannot investigate a crime. They can stop a number from reaching you, which is usually what you want in the short term.
Decide early whether you are reporting it or preserving evidence. If you may need records for a bank dispute or a police file, keep the originals before you clean up your phone.
Timelines: what happens after you report
Timelines vary, and no agency promises a fast resolution. Knowing the rough shape stops you waiting for a call that will not come.
| Route | What happens | Typical timing |
|---|---|---|
| Telecom provider | Number blocked or labelled on the network | Hours to a few days |
| CRTC do not call complaint | Added to a regulatory record, possible action against a telemarketer | Weeks to months |
| Canadian Anti-Fraud Centre | Report logged and used for trend analysis | Immediate acknowledgement, no case follow-up |
| Local police | File opened if money or threats are involved | Days to weeks for contact |
| OPC complaint | Reviewed under PIPEDA or provincial law | Months |
A CRTC do not call complaint is not a live case you can track. Complaints accumulate, and enforcement against a telemarketer comes later, if it comes at all.
Police timelines depend on the file. A fraud with a clear financial loss and bank records moves faster than a report of an attempted call with no loss.
If you lost money, contact your bank the same day. Card and transfer reversals have short windows, and that clock runs separately from every reporting route above.
Scam verification: confirming a number is genuinely reported
Scam verification means checking a number or message against reliable sources before you act on it, not after.
The strongest check is a callback. Look up the organization's number yourself, from its own website or a statement, and call that. Never use a number the caller or text gave you.
Reverse number lookups and community spam databases are useful signals, not proof. A number can be spoofed, and a clean result means nothing if the scammer copied a real line.
Government agencies in Canada do not demand payment by gift card, cryptocurrency or wire transfer, and they do not threaten arrest over the phone. That pattern alone is enough to stop.
For repeat nuisance calls, a call-blocking app or your phone's built-in screening helps, and it pairs well with this guide to the facebook marketplace interac e-transfer scam that logs and forwards reports for you.
Be careful with services that promise to identify any caller or uncover a scam instantly. No tool can verify a spoofed number with certainty, and some of those services collect the data they claim to protect.
Keep a simple log: number, date, time, what was said, what you did. If the same number returns or a bank dispute follows, that log is the difference between a claim and a story.
Common questions
Does the National Do Not Call List stop scam calls? No. It restricts lawful telemarketers who are required to check it. Scam callers are already breaking the law and do not consult the list.
Can the CRTC trace the person who called me? Rarely. The CRTC regulates carriers and telemarketing conduct. It can act on spoofing through authentication rules, but it does not pursue individual overseas scammers.
Should I report a scam text if I did not lose money? Yes. Reports to the Canadian Anti-Fraud Centre build the trend data that drives enforcement and public warnings, and volume is what counts.
What is the difference between a CAFC report and a police report? The CAFC collects intelligence and does not investigate your case. Police open a file and can pursue charges, so report to both when money or threats are involved.
How long does a CRTC complaint take? There is no fixed timeline. Complaints feed a regulatory record, and any enforcement against a telemarketer comes later, often months after the reports accumulate.
Can a scammer use a real Canadian number? Yes. Caller ID spoofing lets a scammer display any number, including one that belongs to a real person or business, so a local area code proves nothing.