TEXT SCAMS

Alberta health card "obsolete" text scam (2026): how to spot it and what to do

A July 2026 smishing wave tells Albertans their physical health card is "obsolete" and pushes them to a fake online switch. It is not real.

SB

SafeBrowz Threat Research Security ResearchJuly 11, 20267 min read

What Alberta actually said about the "obsolete health card" text

In early July 2026, the Government of Alberta issued a public warning about a text-message scam circulating across the province. Residents reported messages claiming their physical Alberta health card had become "obsolete" and that they had to re-register online. Coverage followed from CBC News, CTV News Calgary, and the Better Business Bureau, and the Olds RCMP echoed the same advice: do not click the link, and delete the message.

The province was blunt. The Government of Alberta will never send unsolicited texts asking for personal or financial information, and it does not require anyone to "replace" a health card through an SMS link. The correct response to one of these texts is to report it, then delete it.

What the scam text says

The exact wording rotates, but the story is consistent. The message tells you three things in sequence: your physical health card was issued before January 2023, that older card is now obsolete, and a new "Health Canada regulatory obligation" means everyone must transition to an "Electronic Health Identification System." Then comes the link, framed as the online application you must complete to keep your coverage.

That application page is the entire attack. Built to look like an official government portal, it asks for a stack of personal and financial data - name, address, date of birth, health card number, and often banking or card details "to verify your identity." None of it reaches a government. It flows to whoever built the page, for identity theft or resale.

The message is dressed up to look like Service Canada or the federal government, leaning on "Health Canada" because it sounds authoritative. This is smishing - phishing by SMS - the same playbook behind the 407 ETR toll text scam and the fake Purolator delivery texts hitting Canadian phones this year. Only the brand on the front changes.

The red flags that give it away

Run down this list. Any single one is enough to know the text is fake.

1. It is a "federal" text about a provincial card. Health care in Canada is a provincial responsibility. Your Alberta health card is issued and managed by Alberta Health through the AHCIP, not by the federal Health Canada or Service Canada. A federal-sounding text telling you to replace your Alberta card is impersonation by design, and this mismatch is the fastest tell.
2. It claims your card is "obsolete" because of when it was issued. Alberta did not obsolete cards issued before January 2023, and there is no "regulatory obligation" forcing you to re-register online. The specific-sounding date is theatre meant to make the story feel real.
3. There is no "Electronic Health Identification System." The program named in the text does not exist. An invented, official-sounding system you enrol in through a link is the scam, not a new policy.
4. It asks for personal or financial information. The Government of Alberta does not collect health card details, banking data, or your date of birth through an unsolicited SMS link. The form is the payload.
5. The link is not alberta.ca. The real domain is the text immediately before the first single slash after https://. If that is anything other than alberta.ca or canada.ca, the message is fake no matter what words sit to the left of it.
6. You did not ask for anything. The message arrives out of nowhere with a countdown feel. Unsolicited, urgent, and link-driven is the shape of every smishing text.

The fake domains versus the real ones

Only a handful of websites are real here. Type them yourself; never tap a link from a text.

What it is	Domain	Verdict
Government of Alberta (health card and AHCIP)	alberta.ca	Real. Type it yourself.
Alberta MyHealth Records	myhealth.alberta.ca	Real. Type it yourself.
Service Canada / Government of Canada (the site the scam spoofs)	canada.ca	Real. Type it yourself.
Fake "e-health ID" lookalike (cheap TLD)	alberta-ehealth-id[.]xyz	Scam.
Fake "Health Canada" enrolment lookalike	health-canada-eid[.]com	Scam.

The red domains above are illustrative of the patterns attackers use, and they are not clickable. Notice the trick in each: a trusted word like alberta or health-canada appears somewhere in the address, but never as the actual registered domain. A real Alberta health card link lives only on alberta.ca, and a real Service Canada page lives only on canada.ca. Anything else, on any other TLD, is a forgery. If you want to check a link you are unsure about, paste it below before you tap it.

What a real Alberta health card change looks like

Knowing the genuine process is the single best defense:

• Alberta Health manages your card through the AHCIP. Update details, order a replacement, or check eligibility at alberta.ca, in person at a registry, or by the phone numbers on the official site. Records live at myhealth.alberta.ca.
• Alberta does not text you an unsolicited link to "re-register" your card. Any legitimate change starts on a page you reach by typing the address yourself, never by tapping an SMS.
• There is no federal system you must switch to. Health Canada and Service Canada are real bodies, but neither issues or replaces your Alberta card, and neither runs an "Electronic Health Identification System." That mismatch is the whole giveaway.
• The timeline is never "within hours by text." A real card matter is handled over days through official channels, not a countdown link.

What to do if you already tapped or entered your details

If you only tapped the link but entered nothing, you are probably fine. Close the tab, clear cookies for that domain, and treat it as a near-miss. If you entered personal or financial information:

• Call your bank or card issuer immediately using the number on the back of your physical card, not one from the text. Ask them to cancel and reissue the card, and freeze it in your banking app right now while you wait for an agent.
• Watch your statements for the next 30 days and dispute anything you did not authorize.
• If you handed over your SIN, health card number, or full identity details, contact Equifax Canada and TransUnion Canada to place a fraud alert, and consider a credit freeze.
• Report it to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca or by phone at 1-888-495-8501, with the URL, the sender number, screenshots, and any amount charged.
• Verify your actual coverage at alberta.ca so you know your card status is unaffected. A full step-by-step cleanup is in I got scammed: what to do now.

Why this text is convincing

Health documents feel official, and any hint your coverage might lapse creates instant worry, which is the reaction the attacker wants. Most people do not carry the federal-versus-provincial split in their heads, so a message stamped "Health Canada" reads as authoritative. The invented details - a card "issued before January 2023," a named "regulatory obligation" - mimic dry bureaucratic language. And it rides a wave: Canadians are already hit with lookalike government and delivery texts, from bank and government imposter scams to foreign equivalents like the myGov account-locked scam in Australia. When the format feels familiar, one more official-looking text slips past.

Frequently asked questions

Is the Alberta health card obsolete text real?

No. The Government of Alberta warned in early July 2026 that texts claiming your health card is "obsolete" and must be replaced through an online link are a scam. Alberta did not obsolete older cards, there is no "Electronic Health Identification System" to switch to, and the province never sends unsolicited texts asking for personal or financial information. The clearest tell is that health cards in Alberta are provincial (Alberta Health and the AHCIP), so a "federal Health Canada" text about your card is impersonation. Do not click the link; delete the message.

Does Alberta Health text you about your card?

Not with unsolicited links asking for your details. Alberta Health manages your card through the AHCIP, and any change is something you start yourself at alberta.ca, in person at a registry, or by the phone numbers on the official site. The province does not send out-of-the-blue texts telling you to "re-register" or "replace" your card through a link, and it never asks for banking information, your date of birth, or your health card number by SMS. If a text does that, it is fake.

I clicked the link and entered my details - what now?

Act quickly. If you entered card or banking information, call your bank using the number on your physical card and ask to cancel and reissue it, and freeze the card in your app immediately. Watch your statements for 30 days. If you gave up your SIN, health card number, or full identity, contact Equifax Canada and TransUnion Canada to add a fraud alert. Report everything to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca or 1-888-495-8501, and confirm your coverage is unaffected at alberta.ca. If you only clicked but entered nothing, close the tab and clear that site's cookies.

How do I report the Alberta health card scam text?

Forward the text to 7726, the SMS spam shortcode that works in Canada, then report it to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca or by phone at 1-888-495-8501, including the URL and the sender's number. The Better Business Bureau Scam Tracker also accepts reports. After you report it, delete the message. Do not reply, and do not tap the link to "unsubscribe."

Flag the fake health-card link before you tap

The text is hard to stop at the carrier, because scammers rotate sender numbers daily. The defense that works is at the destination. When you tap the link and land on a page pretending to be an Alberta or Health Canada health-ID application, a browser-layer scanner can see it is impersonating a government health service on a domain that is not alberta.ca or canada.ca, and block it before you type a single field. SafeBrowz checks the link before you tap it and flags a fresh government-lookalike page from its content and pattern, even before any public blocklist has the domain. Prefer not to install an extension? The same engine runs at the free public URL checker: paste any link from a suspicious text and get a verdict in seconds, no login.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

• Layer 1 - Local detection: 60+ URL patterns + 550+ brand-specific signatures + community whitelist/blacklist, all running directly in the extension before the page renders. It catches the government-lookalike construction in these URLs - trusted words like alberta, health-canada, service-canada, or ehealth-id stitched onto a domain that is not the official one, or parked on a cheap TLD.
• Layer 2 - API checks: aggregates Google Safe Browsing, PhishTank, URLhaus, ScamAdviser, and 30+ scam TLD lists, plus a domain-age lookup that flags the fresh, free-hosted fake portals these campaigns spin up (most are less than 30 days old).
• Layer 3 - AI deep scan (Premium): 100+ language content analysis reads the fake application form itself and flags a page mimicking an Alberta or Health Canada health-ID enrolment on a non-official domain, even when the exact URL is brand new.

Honest scope: a provincial health portal is not a household name the way a bank is, and a brand-new government-lookalike domain may not sit on any blocklist yet. What catches it early is the AI content layer reading the impersonation, plus the caution SafeBrowz applies to fresh and free-hosted pages. SafeBrowz is free on Chrome, Firefox, and Edge, with a live Android app and Safari pending. Premium is $14.99 a year, and a single key covers 3 devices.

Detection signatures come from threat-intelligence research and brand database analysis, not from user browsing data. SafeBrowz does not store per-user browsing history.

Bottom line: the Alberta health card "obsolete" text is a fraud that only works if you tap the link and start typing. Type alberta.ca yourself, report the text, and put SafeBrowz on your browser so the fake health-ID page gets flagged before it ever loads.

Install SafeBrowz free

Add the browser extension, or the SafeBrowz Android app, that flags fake government and health-card pages automatically, on every page, before it renders. Free forever.

Add to Chrome Add to Firefox Add to Edge Get it on Google Play