Gift card fraud is one of the fastest-growing scam categories in Canada. The Canadian Anti-Fraud Centre receives thousands of reports each year, and those are just the cases people actually report — most go unreported because victims feel embarrassed.
The good news: the scams almost always follow predictable patterns. This guide walks through the major ones and tells you exactly what to do.
Why scammers love gift cards
Three reasons:
- They're untraceable. Once a card code is read aloud over the phone or sent in a screenshot, the funds are essentially cash. There's no chargeback mechanism like with credit cards.
- They're irreversible. Within minutes of getting the code, scammers transfer the value to a different card or use it to buy other gift cards in chains, making it impossible to recover.
- They're easy to push on victims. Convincing someone to wire $5,000 from their bank takes effort. Telling them to drive to Walmart and buy gift cards feels less suspicious — even though the outcome is the same.
The "CRA / government" scam
How it works: A caller (or pre-recorded voice) claims to be from the Canada Revenue Agency, RCMP, or a Canadian court. They say you owe back taxes, missed jury duty, or have an outstanding warrant. The "only way" to settle it before arrest is to buy gift cards (usually Apple, Steam, or Google Play) and read the codes over the phone.
How to spot it:
- The CRA never demands immediate payment by phone, and certainly not in gift cards.
- The CRA never threatens immediate arrest.
- Real legal matters come via written mail and give you time to respond.
What to do: Hang up. If you're worried it might be real, call the CRA directly using the number on their official website (canada.ca/cra). Don't call any number the scammer gave you.
The "boss / family emergency" scam
How it works: You get a text or email from someone claiming to be your boss, a family member, or a close friend. They need a "discreet favour" — buy some gift cards "for client appreciation" or "for mom's birthday surprise" — and send the codes ASAP. The sender's name looks right, but the email/phone is slightly off.
How to spot it:
- Look at the actual email address, not just the display name. Scammers spoof "John Smith" but the address is
john.smith.ceo@gmail.cominstead of your real CEO's domain. - Real bosses don't ask for gift cards. Ever. There's no business reason to buy them as a "client gift" without going through accounting.
- The message is always urgent and asks for secrecy ("don't mention this to anyone").
What to do: Call the person directly using a phone number you already have. Verify in person if you can. Never act on text alone.
The "utility / hydro / Internet" scam
How it works: A caller threatens to disconnect your power, gas, or internet within an hour because of "overdue charges." They demand payment via gift cards.
How to spot it: Real utilities give written notice well in advance. They accept normal payment methods. They don't take gift cards. They don't pressure you into deciding in 60 minutes.
What to do: Hang up. Call the utility directly using the number on a recent bill (not the number the caller gave you).
The "online romance" scam
How it works: Someone on a dating app or social media befriends you, builds rapport over weeks or months, then asks for help — money for a sick relative, a stuck shipment, an emergency travel issue. They prefer gift cards because "wire transfers won't go through where they are."
How to spot it:
- You've never met them in person — and they always have an excuse why a video call isn't possible.
- The story has lots of complications and dramatic urgency.
- They ask for gift cards rather than wire transfers, suggesting a workaround at every step.
What to do: Stop sending money. Talk to a trusted friend or family member. Report the profile to the platform and to the Canadian Anti-Fraud Centre.
The "fake balance-check site" scam
This is the one this site exists to fight against.
How it works: You search Google for "Vanilla gift card balance" or similar. The top results — even some labelled "Sponsored" — include sites that look just like the real issuer's page. You enter your card number, expiry, and CVV. The fake site immediately drains the card or sells the details to other fraudsters within seconds.
How to spot it:
- Look at the actual URL in the browser address bar — not just the page design. Real Vanilla Canada is
vanillagift.ca. Fakes use names likevanllagift.ca(missing letter),vanilagift.com(one L),vanilla-gift.online,vanillagiftbalance.shop. - Be especially wary of unusual TLDs in the gift-card space:
.shop,.online,.cards,.live. - Fake sites often skip privacy policies, terms, contact pages — or have generic ones with no real organization behind them.
What to do: Always type the issuer URL directly. Use a known directory like this one to navigate to official issuer sites. If you've already entered your card on a site you now suspect is fake, contact the real issuer immediately to try to freeze the card.
Universal red flags
If any of these are present, stop and verify before doing anything:
- Payment in gift cards is requested.
- The request is urgent — "in the next hour," "before they arrest you," "before the deal expires."
- You're told to keep it secret — "don't tell anyone, don't tell the cashier why you're buying these."
- You're asked to send a photo of the back of the card or read the codes aloud.
- The caller knows some personal details but is fuzzy on others (data harvested from a breach, used to add credibility).
- Threats — arrest, deportation, disconnection, or harm to a family member.
If you've been targeted
- Stop sending cards or codes immediately.
- Save evidence — screenshots, emails, phone numbers, names used.
- Contact the gift card issuer — they may be able to freeze the card if you act within minutes.
- Report to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca or 1-888-495-8501.
- Tell your bank if you shared any other financial information.
- Don't blame yourself — modern scams are sophisticated, and falling for one is a measure of how good the scammers have gotten, not how careless you were. The most useful thing you can do now is report it so others are warned.
For our full safety resource, see the Safety page.