TrustChekrIs That RBC Email or Text a Scam?
RBC is Canada's largest bank and a legitimate institution. But RBC impersonation is one of the most-reported banking fraud types in Canada — the bank maintains 25+ active scam alerts and confirms scammers routinely fake RBC phone numbers, domains, and email addresses (spoofing). The real RBC never asks for passwords, PINs, or full card numbers by email or text.
Our verdict
Educational
Trust score: 100 / 100
RBC Royal Bank is Canada's largest financial institution by market capitalization and a legitimate, regulated bank. The fraudsters impersonating it are not. RBC impersonation appears among the most-reported banking fraud types in Canada year over year — the bank's own alerts page (rbc.com/cyber-security/alerts/) lists over 25 active scam variants as of early 2026, including fake fraud alert texts, faked customer service calls, and fake messages pretending to be from real companies (phishing) emails that copy RBC's exact visual identity.
The faked text is the most common entry point. A text arrives that appears to be from 'RBC' in your existing RBC message thread — because scammers use SMS sender ID spoofing to inject messages into legitimate banking threads. The text claims a suspicious transaction occurred and asks you to click a link or call a number to dispute it. The link goes to a fake RBC login page that harvests your online banking credentials. The phone number connects you to a scammer posing as RBC fraud prevention.
The bank investigator scam is the high-loss variant. A caller fakes RBC's real customer service number (1-800-769-2511). They claim an insider at your branch is stealing from accounts and that you must cooperate with an 'investigation' by withdrawing cash, buying gift cards, or transferring funds to a 'safe holding account.' The caller may know your name, partial account number, and recent transactions — data obtained from other breaches or tricking people into sharing private information (social engineering). CBC Marketplace documented an Ontario woman who lost $14,000 this way before realizing the call was fraudulent.
RBC's published fraud policy is explicit: RBC will never ask for your full password, PIN, or card number by email, text, or phone. RBC will never ask you to transfer money to a 'secure account' or 'safe account.' RBC will never tell you to withdraw cash and hand it to a courier. If you receive any such request, it is not RBC.
Legitimate RBC contact channels: Online banking at rbc.com (always navigate directly, never via link). Phone at the number printed on the back of your card. For fraud specifically: 1-800-769-2511. Suspicious emails can be forwarded to phishing@rbc.com. Suspicious texts can be forwarded to 7726 (SPAM) on most Canadian carriers. Losses can be reported to the CAFC at 1-888-495-8501 or reportcyberandfraud.canada.ca.
Check rbc.com yourself
Run a live scan to see the current SSL status, domain age, blacklist checks, and full trust score report.
Editorial note: This article reflects the state of publicly available information at the time of writing. Business practices, ownership, and safety records change over time. TrustChekr is not affiliated with any company reviewed here and does not receive payment for editorial coverage. Verdicts are based on documented evidence and are subject to revision.