SMISHING - CANADA

A text says your bread settlement money is waiting. The claims window shut in December.

Canadians really are owed money from the $500 million bread price-fixing settlement, and payments really did start going out. That is precisely why a text about it works. The part the message needs you not to know is that there has been nothing to claim since 12 December 2025.

SB

SafeBrowz Threat Research Security Research · 28 August 2026 · 8 min read

What the message looks like

It arrives as a text, not an email, and it is short. One version reported to CBC News told the recipient to verify their eligibility for the "Canadian Bread Class Action settlement" before a date a few days away. The number it came from carried a 902 area code, which is Nova Scotia, and that was the only thing that gave the recipient pause.

She clicked anyway. She had filed a claim months earlier and was expecting a payout, so a message about it was not surprising. The page she landed on named a specific figure she was owed, $182, and walked her through the price-fixing background accurately enough that she described it as looking legitimate. That figure is the giveaway in hindsight: the real settlement pays a flat $49.11, or $24.11 for people who took the Loblaw gift card in 2018, and nothing else. What broke it was the next screen, which asked for her credit card so the refund could be processed.

Why this one gets past careful people

Most scam texts have to manufacture a reason for you to care. This one does not, and that is the whole difference.

Millions of Canadians bought packaged bread between 2001 and 2021. A large number of them filed a claim during the autumn of 2025, were told the payout would be modest, and then waited months. By May 2026 payments were genuinely being issued, by e-transfer or cheque depending on what each person had selected. So when a text arrives about the bread settlement, it is not landing on scepticism. It is landing on a person who is already owed money and already waiting for it.

That is the same machinery behind the Amazon Prime settlement refund scam, where a real FTC settlement was the cover story. Being genuinely owed something is one of the few states that makes an otherwise cautious person click first and think second.

The two facts that end the conversation

You do not have to examine the message. Two things about the real settlement make every version of this text impossible.

1. Claims closed on 12 December 2025. The window opened on 11 September 2025 and shut on 12 December. There is no eligibility left to verify, no late claim to file, and no deadline approaching. Anything offering you a way to claim now is offering something that does not exist.
2. The administrator does not text. The official site states it as a security notice in its own words: no text messages will be sent to you. Not to remind you, not to confirm your details, not to tell you a payment is ready.

If you filed a valid claim, your money arrives the way you already chose when you filed, by e-transfer or by cheque. There is no step where you fill in a form, and no step where you enter a card.

What the Anti-Fraud Centre actually recorded

The Canadian Anti-Fraud Centre told CBC News it had received nine reports of this phishing text since 1 March 2026. Every one of them asked the recipient for the same four things: name, address, date of birth, and credit or debit card information. In four of those reports, the card information was compromised.

Nine is a small number, and it is worth being honest that it represents reports rather than attempts. What matters more is the consistency: the same four fields every time. That combination is not a payout form. Name, address and date of birth are what someone needs to impersonate you later, and a card number is what someone needs to charge you now.

The law firm handling the Ontario side said it was working with the RCMP and the Anti-Fraud Centre, and the administrator had a takedown issued against one of the fake sites. More appeared after it came down, which is the normal shape of this: the page is disposable, the text list is not.

The shape of the fake addresses

The copies do not use random names. They use variations on the real settlement address, because the real one is what people have seen before and half-remember.

The genuine claims site is canadianbreadsettlement.ca, run by the court-appointed administrator veritaglobal.com, and there is a separate site for people who lived in Quebec on 31 December 2021. Those are the only ones.

CBC reported that the fake pages use variations of the real settlement address, which is why they read as familiar at a glance. We are not reproducing the specific addresses here, because the ones that were reported have already been taken down and new ones keep replacing them, so a list would teach you the wrong thing.

The rule that survives every rotation is structural. What decides where a link actually goes is the part immediately before the first single slash after https://, not the part that looks familiar at the start. A real settlement name can sit anywhere to the left of that and mean nothing at all. Read from that slash backwards, and if what you find there is not the address above, nothing else on the page matters.

Red flags, in the order you will meet them

• It is a text at all. This alone is conclusive here. The administrator has said it does not send them.
• A deadline. Claim before the first, verify within 48 hours. The real deadline passed in December 2025 and no new one exists.
• Any amount that is not $49.11 or $24.11. A named figure like $182 feels like proof someone pulled your file. The real payout has exactly two possible values, so a third one is a number typed into a template.
• An unfamiliar area code, or a short code you have never had contact from. Not proof on its own, but worth the pause it earns.
• Date of birth alongside address. A payout does not need your date of birth. Identity theft does.
• A card number. The end of the road. Money owed to you never requires a way to charge you.

If you already filled it in

1. Call your bank or card issuer now and tell them the card is compromised. Four of the nine logged reports involved compromised cards, so treat this as likely rather than possible, and ask for the card to be frozen and reissued.
2. Report it to the Canadian Anti-Fraud Centre. The reports are how the pattern gets tracked and how the takedowns get triggered.
3. Watch your statement for small amounts first. A tiny test charge often precedes a real one.
4. Expect a second approach. Someone offering to recover the money you lost is the standard follow-up, and it is the same operation. There is more on that in what to do after a scam.
5. Check the real settlement status yourself, by typing the official address rather than following any link, if you want to confirm where your genuine payment stands.

Block the page before the card screen, not after

Worth being clear about what a browser tool can and cannot do with a scam that arrives by SMS.

We do not see your text messages. If the message is sitting in your phone, the checks above are what settle it, and the strongest one costs nothing: claims closed in December, so there is nothing to claim.

What is checkable is the moment after the tap, which is where the damage in these reports actually happened. Nobody lost anything by reading the text. They lost a card by reaching a page and filling it in. Layer 1 reads the shape of the address locally before the page renders. Layer 2 checks the destination server-side against reputation sources, our blocklist, and a brand database of more than 550 names, and it is that brand layer which reads a familiar name sitting to the left of an unfamiliar domain as impersonation rather than as a match. Layer 3 is the AI deep scan, a Premium feature with one free scan a day for everyone else, which reads what the page actually serves rather than the logo at the top of it.

Honestly stated: we cannot tell you whether your settlement payment has been issued. Only the administrator can. What we can do is judge the page a link opens, which is the step where a card gets taken.