A sophisticated and deceptive wave of phishing messages is hitting the Durham Region, as scammers pivot to a new “image-only” format to bypass mobile security. The Purolator Image-Text Scam 2026 was first detected on May 11, specifically targeting residents in Ontario with text messages that appear as photos rather than traditional text. This deliberate switch is designed to evade modern smartphone filters that automatically scan text for malicious links. By embedding the threat inside an image, fraudsters are successfully landing dangerous phishing links directly in the “inbox” of thousands of residents in Oshawa, Whitby, and Ajax.
The “Image Trick” Explained
In the Purolator Image-Text Scam 2026, the recipient receives an SMS that looks like a standard delivery update. However, because the content is an image, built-in security software often fails to flag the suspicious URL. Abbas Yazdinejad, a leading Canadian cybersecurity expert, warns that while simply viewing the image is low-risk, the danger lies in manually typing the displayed URL into a browser. Once a user visits the fake site, they are typically prompted to pay a “delivery fine” or update personal banking information to release a non-existent package.
Red Flags to Watch For
Purolator has officially confirmed that the Purolator Image-Text Scam 2026 is not associated with their services. Residents should look for these specific red flags:
-
The Sender Number: The scam messages often originate from regular 10-digit U.S. or international phone numbers. Official Purolator texts typically come from a verified five-digit short code.
-
The Link Format: The image will prompt you to visit a URL that does not end in purolator.com.
-
High-Pressure Language: Phrases like “Immediate Action Required” or “Shipment will be returned by end of day” are used to manufacture a sense of urgency.
-
Requests for Payment: Purolator maintains a strict policy: they will never ask for credit card, banking information, or wire transfers via text message or WhatsApp.
Official Verification Steps
If you receive a suspicious notification that claims to be part of the Purolator Image-Text Scam 2026, do not click or type any links. Instead, follow these steps:
-
Use the Tracking Tool: Go directly to purolator.com and enter your 12-digit tracking PIN. If there is a legitimate issue, it will be reflected there.
-
Report the Number: Forward the scam message to 7726 (SPAM) to help your mobile carrier block the sender.
-
Run a Scan: If you have already clicked the link, run a malware/antivirus scan on your device immediately and monitor your bank statements.
Wider Impact in Durham
The Purolator Image-Text Scam 2026 is part of a larger trend in “delivery fraud” that has plagued the region this spring. The Durham Regional Police Service (DRPS) and the Canadian Anti-Fraud Centre are currently tracking several variations of this scam, including those impersonating Canada Post and FedEx. Residents who have been victimized or have shared financial information are urged to contact their local police and report the incident online to help track the evolution of these visual-phishing tactics.
