What Is the Tangerine Bank Scam?
Tangerine Bank scams target customers of the Canadian online bank through phishing emails and texts that mimic Tangerine's fraud alerts, OTP relay phone calls, and authorized push payment fraud. Because Tangerine operates exclusively online with no physical branches, its customers interact with the bank entirely through digital channels — making them especially vulnerable to digital impersonation attacks.
Tangerine's parent company is Scotiabank, and attackers sometimes leverage this relationship to add credibility to impersonation calls. The Canadian Anti-Fraud Centre consistently reports online bank impersonation — including Tangerine and Simplii — as high-frequency fraud categories. Related: Scotiabank phishing and bank account phishing.
How Tangerine Scams Work
Phishing texts claim unusual activity on your Tangerine account and link to a fake login page that harvests credentials. Vishing calls impersonate Tangerine fraud prevention, confirm "suspicious transactions," and ask you to verify your identity by reading out the OTP sent to your phone — which the attacker is simultaneously using to log in or authorize a transfer. See our fake bank texts guide and bank text scam guide.
How Scammers Use Tangerine's Scotiabank Connection and ING Direct History
Tangerine was originally ING Direct Canada — one of Canada's first major online-only banks — before Scotiabank acquired it in 2012 and rebranded it as Tangerine in 2014. Both facts are exploited in targeted fraud. Callers sometimes open with a reference to "your account from when you were with ING Direct, now Tangerine," using the former brand name to appear knowledgeable about long-standing customers who have held accounts since before the rebrand. A caller who references ING Direct to establish familiarity should not be treated as confirmation of legitimacy.
The Scotiabank connection creates a separate angle. Because Scotiabank has a full physical branch network across Canada, its name carries a level of institutional weight that some callers invoke to set up a Tangerine fraud request. A caller may identify as "Scotiabank calling about your Tangerine account." However, Tangerine and Scotiabank are operated as separate brands with separate customer-service lines. An unexpected caller invoking Scotiabank's name in connection with your Tangerine account is not itself evidence that the call is legitimate. If you receive such a call, end it and reach Tangerine directly at 1-888-826-4374.
The Orange Key Referral Scam
Tangerine's Orange Key referral program allows existing customers to share a personal referral code with new customers, with both parties eligible for a bonus when the new account is opened. This feature is well-known to Tangerine's customer base and is referenced regularly in Tangerine's own marketing — which is precisely why it is exploited in phishing.
Fraudsters send messages claiming that a referral bonus is available and ready to claim, directing the recipient to a fake Tangerine login page to "redeem" it. Because Tangerine does send genuine referral-related notifications, these messages can seem plausible. The lure works on two groups: existing customers who expect referral communications, and potential new customers who may have received a genuine Orange Key from a friend and are looking to sign up. A fake sign-up page can collect banking credentials from a new user while also harvesting the Orange Key shared with them — giving the attacker a real existing customer's referral code.
Real Tangerine referral bonus communications will direct you to tangerine.ca — never to an external link with a deadline. If a message creates urgency around claiming a referral bonus, log in directly at tangerine.ca rather than following any link in the message.
Examples of Tangerine Scam Messages
- "Tangerine: Unusual activity detected on your account. Log in to verify: [link]"
- "TANGERINE ALERT: Your debit card has been temporarily locked. Verify your identity: [link]"
- "This is Tangerine Fraud Prevention. We've detected an unauthorized transaction of $1,247. To reverse it, please confirm the verification code we just sent."
- "Tangerine: A new device has been added to your account. If not you, call [number] immediately."
- "Your Tangerine e-transfer of $850 is pending. If not authorized, cancel at: [link]"
- "Your Orange Key referral bonus is ready to claim. Log in before [date] to receive it: [link]"
- "Your Tangerine GIC is maturing. Confirm your renewal instructions to avoid automatic rollover: [link]"
Tangerine Scam Examples
The Fake Fraud Alert Login Page
An SMS claiming unauthorized account activity links to a fake tangerine.ca login page harvesting credentials and security answers.
The OTP Relay Call
A caller confirms a fake fraudulent transaction and asks you to read out the OTP code sent to your phone — using it in real time to authorize a transfer or account change.
The Safe Account Transfer
A "Tangerine fraud agent" claims your account is compromised and asks you to transfer funds to a "safe account" they provide. Once transferred, the money is gone.
The Fake e-Transfer Cancellation
A text claims an unauthorized Interac e-transfer is pending and provides a link to cancel — which harvests credentials. Related: Interac scam guide.
The New Device Alert Phishing
An email about a new device being added to your account links to a fake security verification page capturing your login and one-time password.
GIC, HISA, and TFSA Phishing: Tangerine's Savings-Specific Fraud
Tangerine is primarily a savings-focused bank, widely known for its high-interest savings accounts, GICs, and registered accounts including TFSAs, RRSPs, and FHSAs. Because Tangerine regularly communicates with customers about savings rates, GIC terms, and registered account activity, fraudsters craft lures that mimic these real communications.
Fake savings rate alerts claim that Tangerine's interest rate is changing and invite customers to "lock in" their current rate by logging in through a link. Tangerine does send genuine rate communications, which makes these messages appear credible. Real rate updates appear in your Tangerine online banking dashboard — they do not require a login action through a link with a deadline.
Fake GIC maturity notices mimic the real communications Tangerine sends when a GIC is approaching its maturity date. A fraudulent version asks the customer to "confirm renewal instructions" or risk automatic rollover, creating urgency at a moment when the customer genuinely expects to hear from the bank. If you receive a GIC maturity notice, log in directly at tangerine.ca to review your account rather than following any link in the message.
Fake TFSA over-contribution warnings combine a real and feared consequence — CRA penalties for TFSA over-contributions — with a fake Tangerine account action. A message might claim your TFSA contribution may be approaching or exceeding your limit and ask you to "verify your contributions" through a login link. Tangerine does not determine your TFSA contribution room — that information comes from the CRA directly, not from your bank. Any message combining Tangerine and a CRA penalty warning should be treated as suspicious.
15 Warning Signs of a Tangerine Scam
- 1)The email is not from @tangerine.ca.
- 2)A link goes anywhere other than tangerine.ca.
- 3)A caller asks you to read out your OTP code.
- 4)You're asked to transfer money to a "safe account".
- 5)The callback number doesn't match Tangerine at 1-888-826-4374.
- 6)Immediate account suspension is threatened.
- 7)The caller knows partial account details to seem credible.
- 8)A new device alert appears but you haven't changed devices.
- 9)A fake e-transfer cancellation link is provided by text.
- 10)You're told to stay on the phone while taking banking actions.
- 11)The caller claims to be from Tangerine's parent company Scotiabank.
- 12)Urgency is applied: "act within 10 minutes".
- 13)The text message asks you to log in via a link.
- 14)You're told not to contact Tangerine directly.
- 15)Gift card or cryptocurrency payment is requested.
What to Do If You Receive a Tangerine Scam Message
Do not click links or call numbers in the message. Log in to tangerine.ca directly and check your account. Report to phishing@tangerine.ca and to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca or 1-888-495-8501. If you shared credentials or an OTP, call Tangerine at 1-888-826-4374 immediately to secure your account. For related guidance, see our bank account phishing guide, Interac scam guide, and identity theft guide.
What Real Tangerine Contact Looks Like
Account alerts, savings rate updates, GIC maturity notices, and referral bonus confirmations all appear in your Tangerine online banking dashboard. None of these communications require you to log in through a link embedded in an email or text message with a time limit. If you receive an email claiming to be from Tangerine, the safest response is to log in directly at tangerine.ca rather than following any link in the message.
Tangerine does not ask for OTP codes over the phone and does not ask you to transfer funds to an external account for security purposes. An unexpected caller who identifies as Scotiabank or references your ING Direct history to establish credibility should not be treated as proof that the call is legitimate. When in doubt, end the call and contact Tangerine at the number on your card: 1-888-826-4374.
Other Scams to Watch For
People researching this scam also check these related pages.
TD Bank Scam
Identify TD Bank impersonation scams and phishing attempts.
Check NowCIBC Scam
Recognize fake CIBC messages and account phishing attacks.
Check NowBMO Phishing
Spot fraudulent BMO Bank of Montreal phishing emails.
Check NowScotiabank Phishing
Identify Scotiabank phishing messages and spoofed emails.
Check NowRoyal Bank Phishing
Detect fake RBC Royal Bank phishing attempts.
Check NowEQ Bank Scam Checker
Verify EQ Bank messages and spot digital banking scams.
Check NowSimplii Financial Scam Checker
Check suspicious Simplii Financial messages for fraud.
Check NowPC Financial Scam Checker
Identify PC Financial fraud attempts and spoofed messages.
Check NowFrequently Asked Questions
Is the Tangerine fraud alert text I received a scam?
If the text asks you to call a number not found on the back of your Tangerine card, or to click a link rather than logging into tangerine.ca, treat it as a scam. Contact Tangerine directly at 1-888-826-4374 to verify any account alerts.
Does Tangerine ever ask customers to transfer funds to a "safe account"?
Never. No legitimate bank asks customers to move money to a "safe account" to protect it from fraud. This is always a scam. If a caller claiming to be Tangerine makes this request, hang up and call Tangerine at 1-888-826-4374.
What is the Tangerine OTP relay scam?
Scammers call pretending to be Tangerine fraud prevention and claim to need the one-time password (OTP) sent to your phone to "verify your identity." Sharing this OTP allows them to complete unauthorized transactions or change your account credentials.
How do I report a fake Tangerine email or call?
Report phishing emails to phishing@tangerine.ca. Report suspicious calls to Tangerine directly at 1-888-826-4374. You can also report to the Canadian Anti-Fraud Centre at 1-888-495-8501.
Can ScamShield Check analyze a suspicious Tangerine message?
Yes. Paste any suspicious Tangerine email, text, or call transcript into ScamShield Check for an instant analysis of banking fraud signals, OTP relay patterns, and safe account transfer requests.