Canada Post Package Scam Call Exposed: Fake Delivery Verification Warning
Written by: Lapain Epuran
Published on:
A caller says Canada Post is holding a package connected to your name. The delivery problem sounds routine until the questions become strangely personal.
The voice may know one accurate detail, which makes the next request feel reasonable. That small advantage is often enough to keep someone listening.
Overview
The call is an impersonation attempt
The Canada Post package scam call is a vishing operation that uses a supposed delivery problem to collect identity information.
“Vishing” means phishing conducted by voice, usually through an unsolicited telephone call or recorded message.
The caller may claim a parcel is delayed, incorrectly addressed, intercepted, suspicious, or waiting for identity verification.
Canada Post is the organization being impersonated and is not responsible for the fraudulent call.
The package story can change quickly
One reported call came from caller ID 306-660-6963 and involved questions about a name, address, and driver’s licence.
That number is a reported display value, not proof of where the call originated.
Telephone identifiers can be spoofed, reassigned, or manipulated by internet calling systems.
The operator may switch from ordinary delivery verification to drugs, customs violations, unpaid fees, or identity theft when fear produces a stronger reaction.
The safest response is independent verification
Hang up without confirming personal details and check the package through Canada Post’s official website or application.
Enter a tracking number obtained from the retailer or genuine shipping confirmation, not from the caller.
If no expected shipment matches the story, the call has even less credibility.
Common warning signs include:
An unsolicited caller asks you to verify a full address or licence number.
The parcel cannot be identified with a valid tracking number.
The caller threatens seizure, police action, fines, or immediate return.
A small delivery fee must be paid through an unusual method.
The operator refuses to let you verify through official Canada Post channels.
You are transferred to supposed customs, police, or fraud departments.
The caller asks for a one-time code sent to your telephone.
The number displayed on your screen is treated as proof of identity.
Why the Caller May Already Know Your Name
Many people assume a caller must be legitimate when the person knows who answered.
Names and telephone numbers are not difficult for criminals to obtain.
They can appear in breached databases, marketing lists, public directories, social profiles, delivery records, and previous scam responses.
A caller may also guess the name from voicemail or ask a vague question that encourages the recipient to supply it.
Knowing one detail is useful because it changes the conversation from “Who are you?” to “What happened to my package?”
The criminal then collects additional facts one at a time.
A full address can help answer credit questions, redirect mail, or make later impersonation messages more convincing.
A driver’s licence number is far more sensitive because it is a durable government identifier.
Date of birth, postal code, and email address can complete an identity profile.
The information may be used directly or sold to another criminal group.
Never “correct” a caller who reads an old or incomplete address.
That apparent mistake may be a deliberate prompt designed to make you provide the current information.
The Reported 306-660-6963 Number Does Not Authenticate the Call
Consumers have associated 306-660-6963 with a suspicious Canada Post package-verification call.
Reporting the number helps other recipients recognize the current script.
It should not be used to accuse the present subscriber because caller ID does not establish ownership or origin.
Scammers can choose a local area code so the call feels familiar.
They can also imitate a genuine business number through caller-ID spoofing.
A trustworthy-looking display name is equally weak evidence.
Your telephone normally shows data supplied through the calling network, not a verified identity document.
Blocking the number may stop one route, but the same operation can call again from another displayed identifier.
The durable defense is recognizing the behavior.
An incoming call should never become the place where you disclose sensitive information about a shipment.
End the conversation, locate the official contact independently, and begin a new call yourself if verification remains necessary.
How the Canada Post Package Scam Call Works
Step 1: The criminal selects a believable everyday event
Millions of Canadians regularly expect online orders, replacement cards, documents, gifts, and marketplace purchases.
A random package story therefore has a good chance of reaching someone who is already waiting for delivery.
The caller does not need access to Canada Post systems for coincidence to create credibility.
Step 2: A local-looking caller ID lowers suspicion
The call may display a Saskatchewan, Ontario, British Columbia, or other familiar area code.
Some screens can even show a business-style label.
Spoofing allows the operator to choose an identifier unrelated to the true location.
Step 3: The package problem creates urgency
The operator says the address is incomplete, the parcel is blocked, or suspicious contents were found.
A deadline may be added, such as return within hours or transfer to authorities.
The recipient feels pressure to resolve the issue before independently checking it.
Step 4: Routine questions build an identity file
The caller begins with information that sounds relevant to delivery, including name, street, postal code, and telephone number.
More intrusive requests follow after the recipient has already cooperated.
A licence number, birth date, account login, or verification code has no reasonable role in an unexpected package call.
Step 5: The script introduces money or a more serious threat
A small redelivery or customs fee may be requested to capture card details.
In another version, the parcel supposedly contains illegal items and exposes the recipient to investigation.
The criminal offers to transfer the frightened person to a fake government officer.
Step 6: A second impersonator reinforces the story
The next voice may claim to represent police, border services, a bank, or a national fraud unit.
The transfer creates the illusion that separate institutions confirmed the same emergency.
In reality, people at the same operation may simply pass the call between extensions.
Step 7: Stolen details support later attacks
Even when no payment occurs, the collected identity data remains valuable.
Follow-up texts can mention the victim’s real address, bank, or supposed case number.
Those details make account-takeover, credit, parcel-redirection, and recovery scams more persuasive.
The Main Variations of the Package Story
A redelivery script claims the parcel cannot be delivered until the address is confirmed.
The caller might send a link that copies Canada Post branding and requests a small card payment.
A customs script says taxes or import fees remain unpaid.
Real import charges can exist, but an unsolicited caller should not dictate an unfamiliar payment channel.
A prohibited-contents script alleges that drugs, passports, cash, or illegal purchases were discovered.
This version uses shame and fear to stop the recipient from contacting family or local police.
An identity-theft script claims someone used the victim’s name to send the suspicious parcel.
The operator then requests sensitive documents under the pretext of clearing the person’s record.
A missed-delivery version sounds less threatening.
It asks the recipient to confirm availability and location, which can reveal when a home is empty.
Some operations combine methods by calling first and sending a fake tracking link during the conversation.
The real purpose may change according to what the victim reveals.
Information You Should Never Give an Unexpected Caller
Do not provide a driver’s licence number, passport number, Social Insurance Number, banking login, card security code, or one-time authentication code.
A courier does not need remote access to your telephone or computer to locate a parcel.
Do not install an application at the caller’s direction.
Legitimate remote-support software can be abused to view screens, intercept messages, and control financial sessions.
A photograph of identification can be more dangerous than reading one number because it includes several reusable data points.
Do not send a selfie holding the document.
That combination may help criminals bypass identity checks on financial platforms.
Never read a one-time code aloud, regardless of what the text says.
The code may authorize a password reset or a new digital wallet.
Even ordinary information should be minimized.
Confirming an email address or current location tells the operation that the record is active and the recipient is responsive.
How to Verify a Real Canada Post Delivery
Begin with the retailer, sender, or marketplace where the purchase originated.
Open the account independently and locate its shipping details.
Copy the tracking number into the official Canada Post website or application.
Do not use a link supplied by the incoming caller or a later text.
A genuine tracking record should show events that correspond with the known order.
Be cautious when a number produces no result or shows activity unrelated to your location.
If a card or document is expected, contact the issuing organization through its published number.
Canada Post advises customers not to provide personal or financial information in response to suspicious communications.
When necessary, call Canada Post using contact details found on its official domain.
Explain that you ended an unsolicited verification call and want to check an expected shipment.
A legitimate representative will not object to independent confirmation.
The ability to pause is one of the clearest differences between a real service problem and a pressure script.
When the Caller Pretends to Transfer You to Police
The most frightening variation begins after the supposed parcel problem has already been established.
The operator says illegal contents were shipped using your identity and that a criminal investigation is now open.
You may hear a badge number, case number, department name, or carefully rehearsed legal language.
None of those details verifies the person speaking.
A second operator can join the line and introduce themselves as a police officer, border agent, investigator, or bank-security specialist.
The staged transfer makes the situation feel independently confirmed.
The impersonator may order you to remain on the line, avoid local police, or keep the case secret from family.
Secrecy prevents calmer people from interrupting the manipulation.
The victim may be instructed to move money into a “safe account” while an investigation supposedly continues.
No legitimate authority protects funds by transferring them to an account controlled by a stranger.
Another version asks for gift cards, cryptocurrency, cash deposits, or payment to clear an arrest warrant.
Real Canadian agencies do not cancel criminal allegations through secret retail payments.
Do not follow instructions to visit several banks or stores.
Criminals may divide transactions to avoid fraud warnings and tell the victim to lie about the reason.
That coaching proves the payment route cannot withstand honest scrutiny.
Hang up and contact local police through a published number if a threat remains concerning.
Do not press a key or accept a transfer offered by the suspicious caller.
A genuine official can document your independent call and explain whether any real case exists.
Company, Address, and Fulfillment Checks
Canada Post is legitimate and is being impersonated
Canada Post is the country’s national postal service and operates official tracking, delivery notices, support channels, and retail locations.
This article concerns criminals borrowing that identity.
Never interpret a scam report as evidence that the genuine postal organization initiated the call.
Use the official domain to reach it.
Caller ID is not a company record
A displayed number cannot prove that a call came from a Canada Post office, contractor, or local facility.
Numbers can be spoofed and legitimate subscribers can be impersonated.
Search results showing previous complaints are useful warnings, but they do not establish the caller’s physical address.
Do not confront an unrelated number owner.
A real parcel should have a traceable commercial origin
Verify the retailer, sender, purchase date, order number, destination, and tracking history.
A criminal often cannot connect the invented package to a genuine transaction.
If the caller says secrecy is required, that instruction is another warning.
Real delivery questions can be discussed with the sender and official postal support.
Payment routes reveal the impersonation
Inspect the exact merchant and web domain before paying any fee.
Gift cards, cryptocurrency, wire transfers, and remote banking access are never normal solutions for a delayed package.
A small card charge can be used to capture full payment details for larger fraud.
Contact the issuer if anything was entered.
What to Do if You Have Fallen Victim to This Scam
End the contact immediately. Stop answering questions, do not call back, and avoid any links or applications the operator provided.
Write down what was disclosed. Record the time, displayed number, exact claims, names used, and every personal or financial detail shared.
Contact financial institutions. Freeze affected cards, secure banking access, and ask fraud staff to monitor or reverse unauthorized transactions.
Protect government identification. Notify the appropriate provincial licensing authority if a driver’s licence number or image was exposed.
Change compromised passwords. Begin with email, banking, shopping, and mobile accounts, then enable unique passwords and multifactor authentication.
Call the mobile provider when necessary. Add account protections if enough information was shared to support a SIM-swap attempt.
Check devices and browsers. Use Malwarebytes after suspicious downloads, and enable AdGuard to reduce malicious advertisements, trackers, and phishing redirects.
Report the incident. Contact the Canadian Anti-Fraud Centre, local police for losses, Canada Post, and the platform carrying any related message.
Watch for follow-up impersonators. Criminals may pose as banks, police, or recovery agents because they already know details from the first call.
Is Your Device Infected? Run a Free Malware Scan
Slow performance, constant pop-ups, or strange behavior? These are classic signs of a malware infection. The fastest way to find out is to scan your device with Malwarebytes Anti-Malware Free — one of the most trusted malware removal tools available.
The free version detects and removes the most common threats, including:
Adware — the cause of those annoying pop-ups
Browser hijackers — unwanted redirects and changed homepages
Trojans and spyware — hidden programs stealing your data
Potentially unwanted programs (PUPs) — software you never asked for
👉 Select your device below — Windows, Mac, or Android — then follow the simple steps to download Malwarebytes, scan your system, and remove any threats it finds. The whole process takes about 5 minutes.
Malwarebytes for WindowsMalwarebytes for MacMalwarebytes for Android
Run a Malware Scan with Malwarebytes for Windows
Malwarebytes is one of the most popular and trusted anti-malware tools for Windows — and it’s completely free for removing infections. It catches threats that many antivirus programs miss, including adware, browser hijackers, and trojans. Follow the steps below to scan and clean your PC in just a few minutes.
Download Malwarebytes
Click the button below to download the latest version of Malwarebytes for Windows from the official source. The free version is all you need — it will scan your computer and remove adware, browser hijackers, and other malicious software at no cost.
(The link opens in a new page where your download will start)
Install Malwarebytes
When the download finishes, open your Downloads folder and double-click the MBSetup file. If Windows shows a User Account Control pop-up, click “Yes” to allow the installation.
Follow the On-Screen Prompts to Install Malwarebytes
The setup wizard will walk you through a few quick screens:
Choose where you’re installing the program — “Personal Computer” or “Work Computer” — then click Next.
Malwarebytes will now install on your device. This usually takes under a minute.
When installation is complete, the “Welcome to Malwarebytes” screen will open automatically.
On the final screen, click Open Malwarebytes to launch the program.
Enable “Scan for Rootkits”
Before scanning, turn on rootkit detection so Malwarebytes can find even the most hidden threats. Click the Settings gear icon on the left side of the screen.
In the settings menu, find “Scan for rootkits” and click the toggle so it turns blue.
Done? Click “Dashboard” in the left pane to return to the main screen.
Start the Scan
Click the blue Scan button. Malwarebytes will automatically update its virus database and start checking your computer for malware.
Wait for the Scan to Finish
The scan checks your entire system for browser hijackers and other malicious programs, so it can take several minutes. Feel free to do something else — just check back occasionally to see the progress.
Quarantine the Detected Threats
When the scan is done, you’ll see a list of everything Malwarebytes found — malware, adware, and potentially unwanted programs. Click the “Quarantine” button to remove all of them at once.
Malwarebytes will now remove the malicious files and registry entries and move them safely into quarantine.
Restart Your Computer
Some threats can only be fully removed after a reboot. If Malwarebytes asks you to restart, click Yes. Once you’re logged back in, your PC is clean and you can continue with the next steps in this guide.
When the scan finishes, click Quarantine to remove everything Malwarebytes found. That’s it — your Windows PC is now clean of trojans, adware, and other malware, and should be back to running smoothly.
If your current antivirus allowed this malicious program on your computer, you may want to consider purchasing Malwarebytes Premium to protect against these types of threats in the future. If you are still having problems with your computer after completing these instructions, then please follow one of the steps:
Malwarebytes for Mac is a free on-demand scanner that removes the malware other security software tends to miss — adware, browser hijackers, and unwanted programs included. Cleaning an infected Mac with Malwarebytes has always been completely free, and it’s our go-to recommendation. Follow the steps below to scan and clean your Mac in just a few minutes.
Download Malwarebytes for Mac
Click the button below to download the latest version of Malwarebytes for Mac.
When the download finishes, open your Downloads folder and double-click the setup file to begin the installation.
Follow the On-Screen Prompts to Install Malwarebytes
The Malwarebytes for Mac Installer will guide you through a few quick screens. Click “Continue” and keep following the prompts until the installation completes.
When the installation is complete, Malwarebytes opens to the Welcome to Malwarebytes screen. Click “Get started“.
Select “Personal Computer” or “Work Computer”
Malwarebytes will ask what type of computer you’re installing it on. Click either Personal Computer or Work Computer, whichever applies.
Start the Scan
Click the “Scan” button. Malwarebytes will automatically update its detection database and begin checking your Mac for malware.
Wait for the Scan to Finish
Malwarebytes will scan your Mac for adware, browser hijackers, and other malicious programs. This can take a few minutes, so feel free to do something else — just check back occasionally to see the progress.
Quarantine the Detected Threats
When the scan is done, you’ll see a list of everything Malwarebytes found. Click the “Quarantine” button to remove all the threats at once.
Restart Your Mac
Malwarebytes will now remove all the malicious files it found. Some threats can only be fully removed after a reboot — if Malwarebytes asks you to restart, allow it. Once you’re logged back in, your Mac is clean.
Once the scan is done, remove every threat it detected. Your Mac is now free of adware, rogue browser extensions, and other potentially harmful software.
If your current antivirus allowed a malicious program on your computer, you might want to consider purchasing the full-featured version of Malwarebytes Anti-Malware to protect against these types of threats in the future. If you are still experiencing problems while trying to remove a malicious program from your computer, please ask for help in our Mac Malware Removal Help & Support forum.
Run a Malware Scan with Malwarebytes for Android
Malwarebytes for Android automatically detects and removes dangerous threats like malware and ransomware so you don’t have to worry about your most-used device being compromised. Aggressive detection of adware and potentially unwanted programs keeps your Android phone or tablet running smooth.
Download Malwarebytes for Android.
You can download Malwarebytes for Android by clicking the link below.
In the Google Play Store, tap “Install” to install Malwarebytes for Android on your device.
When the installation process has finished, tap “Open” to begin using Malwarebytes for Android. You can also open Malwarebytes by tapping on its icon in your phone menu or home screen.
Follow the on-screen prompts to complete the setup process
When Malwarebytes will open, you will see the Malwarebytes Setup Wizard which will guide you through a series of permissions and other setup options. This is the first of two screens that explain the difference between the Premium and Free versions. Swipe this screen to continue. Tap on “Got it” to proceed to the next step. Malwarebytes for Android will now ask for a set of permissions that are required to scan your device and protect it from malware. Tap on “Give permission” to continue. Tap on “Allow” to permit Malwarebytes to access the files on your phone.
Update database and run a scan with Malwarebytes for Android
You will now be prompted to update the Malwarebytes database and run a full system scan.
Click on “Update database” to update the Malwarebytes for Android definitions to the latest version, then click on “Run full scan” to perform a system scan.
Wait for the Malwarebytes scan to complete.
Malwarebytes will now start scanning your phone for adware and other malicious apps. This process can take a few minutes, so we suggest you do something else and periodically check on the status of the scan to see when it is finished.
Click on “Remove Selected”.
When the scan has been completed, you will be presented with a screen showing the malware infections that Malwarebytes for Android has detected. To remove the malicious apps that Malwarebytes has found, tap on the “Remove Selected” button.
Restart your phone.
Malwarebytes for Android will now remove all the malicious apps that it has found. To complete the malware removal process, Malwarebytes may ask you to restart your device.
After the scan, tap Remove Selected to delete all detected threats. Your Android phone is now clean — no more malicious apps, adware, or browser redirects.
If your current antivirus allowed a malicious app on your phone, you may want to consider purchasing the full-featured version of Malwarebytes to protect against these types of threats in the future. If you are still having problems with your phone after completing these instructions, then please follow one of the steps:
Restore your phone to factory settings by going to Settings > General management > Reset > Factory data reset.
Now that your device is clean, keep it that way. Most infections start with a malicious ad or a fake download button — so blocking them at the source is your best defense.
We recommend AdGuard, which blocks malicious ads, phishing pages, and dangerous redirects before they can reach you.
Legitimate contact can occur in some delivery circumstances, but an incoming call should never be trusted solely because of its display name.
Verify independently through official tracking and support.
Is 306-660-6963 a confirmed scammer’s number?
It has been reported in connection with a suspicious package call.
Caller-ID spoofing means the display does not prove the true origin or implicate the number’s current owner.
Why would a caller ask for my driver’s licence?
The information can support identity theft, account recovery attempts, fraudulent applications, or more convincing follow-up scams.
Do not provide it during an unexpected delivery call.
Can a $1 or $2 redelivery fee be dangerous?
Yes. The small amount can make a fake payment page feel harmless while criminals capture the complete card details entered.
What if the caller knew my name and address?
Those details may come from public records, commerce data, or previous breaches.
They do not prove access to Canada Post systems or knowledge of a real parcel.
Where should I report the call?
Report it to the Canadian Anti-Fraud Centre and Canada Post.
Contact local police and financial institutions promptly if identification or money was taken.
The Bottom Line
The Canada Post package scam call turns an everyday delivery concern into a route for identity theft, payment fraud, or a more elaborate impersonation scheme.
Hang up, verify through official channels, protect any exposed information, and remember that a familiar caller ID is not proof of a caller’s identity.
10 Rules to Avoid Online Scams
Here are 10 practical safety rules to help you avoid malware, online shopping scams, crypto scams, and other online fraud. Each tip includes a quick “if you already got hit” action.
Stop and verify before you click, log in, download, or pay.
Most scams win by creating urgency. Verify using a trusted method: type the website address yourself, use the official app, or call a known number (not the one in the message).
If you already clicked: close the page, do not enter passwords, and run a malware scan.
Keep your operating system, browser, and apps updated.
Updates patch security holes used by malware and malicious ads. Turn on automatic updates where possible.
If you saw a scary “update now” pop-up: close it and update only through your device settings or the official app store.
Use layered protection: antivirus plus an ad blocker.
Antivirus helps block malware. An ad blocker reduces scam redirects, phishing pages, and malvertising.
If your browser is acting weird: remove unknown extensions, reset the browser, then run a full scan.
Install apps, software, and extensions only from official sources.
Avoid cracked software, “keygens,” and random downloads. During installs, choose Custom/Advanced and decline bundled offers you do not recognize.
If you already installed something suspicious: uninstall it, restart, and scan again.
Treat links and attachments as untrusted by default.
Phishing often impersonates delivery services, banks, and popular brands. If it is unexpected, do not open attachments or log in through the message.
If you entered credentials: change the password immediately and enable 2FA.
Shop safely: research the store, then pay with protection.
Be cautious with brand-new stores, “closing sale” stories, and prices that make no sense. Prefer credit cards or PayPal for dispute options. Avoid wire transfers, gift cards, and crypto payments.
If you already paid: contact your card issuer or PayPal quickly to dispute the transaction.
Crypto rule: never pay a “fee” to withdraw or recover money.
Common patterns include fake profits, then “tax,” “gas,” or “verification” fees. Another is a “recovery agent” who demands upfront crypto.
If you already sent crypto: stop paying, save evidence (wallet addresses, TXIDs, chats), and report the scam to the platform used.
Secure your accounts with unique passwords and 2FA (start with email).
Use a password manager and unique passwords for every account. Enable 2FA using an authenticator app when possible.
If you suspect an account takeover: change passwords, sign out of all devices, and review recent logins and recovery settings.
Back up important files and keep one backup offline.
Backups protect you from ransomware and device failure. Keep at least one backup on an external drive that is not always connected.
If you suspect infection: do not connect backup drives until the system is clean.
If you think you are a victim: stop losses, document evidence, and escalate fast.
Move quickly. Speed matters for disputes, account recovery, and limiting damage.
Stop payments and contact: do not send more money or respond to the scammer.
Call your bank or card issuer: block transactions, replace the card if needed, and start a dispute or chargeback.
Secure your email first: change the email password, enable 2FA, and remove unfamiliar recovery options.
Secure other accounts: change passwords, enable 2FA, and log out of all sessions.
Scan your device: remove suspicious apps or extensions, then run a full malware scan.
Save evidence: screenshots, emails, order pages, tracking pages, wallet addresses, TXIDs, and chat logs.
Report it: to the payment provider, marketplace, social platform, exchange, or wallet service involved.
These rules are intentionally simple. Most online losses happen when decisions are rushed. Slow down, verify independently, and use payment methods and account controls that give you recourse.
Hello! I'm Lapain Epuran, your go-to source for detailed and honest product reviews. From tech gadgets to miracle cures, I provide insights to help you make informed choices. Join me as we discover what's truly worth your time and money.
