Hi friends, and thanks for stopping by to read The Fake Questrade Email That Almost Got Everything Right.
I receive plenty of scam emails. Most are so ridiculous that they’re almost entertaining. You know the type: someone wants to give me millions of dollars, a wealthy widow is searching for true love, or my Netflix account has supposedly been suspended for the fifteenth time this year.
But every now and then, a scam email comes along that is actually worth a closer look.
This one landed in my spam folder on January 27, 2026, while I was wrapping up my time in Peru. I was preparing to fly to Ecuador the next day to begin the Galápagos Islands portion of my Great South American Adventure when the email arrived. At the time I didn’t pay much attention to it because my email server had correctly deposited it in my spam folder, but I eventually took a closer look and realized it would make a perfect example for a future scam article.
What caught my attention wasn’t just that the email claimed to be from Questrade. I actually have a Questrade account.
That immediately makes this type of scam more dangerous than the average phishing attempt. Instead of pretending to be a company I’ve never dealt with, the scammers chose a financial institution that I genuinely use.
Adding to the irony, I had spent three months housesitting in Toronto at the end of 2024 and walked past Questrade’s office on Yonge Street almost every day. So when a supposedly important account notice from Questrade appeared in my junk folder while I was wrapping up my travels in Peru, I decided to take a closer look.
The scammers had clearly done their homework.
The Scammer’s Questrade pitch to me
Here’s the email I received from: Questrade No-Reply login@ndxrstn.com
Dear Client,
This is a reminder regarding an important statement insert issued with your December 2025 account statement. The insert contains annual reminders about key tax slip timelines and provides required disclosures and account-holder information that may be relevant to your account. The materials may include the Leveraged Risk Disclosure and Significant Shareholders Information, along with other disclosures and notices.
To help ensure your account records remain current, please review the statement insert in eServices as soon as possible. While reviewing the materials, eServices may request that you acknowledge or confirm your review. If prompted, please complete the acknowledgement by following the on-screen instructions. This confirmation helps ensure required disclosures are properly recorded and supports a smoother experience for future account requests.
Timely review is important because certain disclosures and annual reminders are time-sensitive. Depending on your account settings and service usage, activities such as submitting account updates, requesting service changes, initiating certain transactions, or using specific account features may rely on up-to-date acknowledgements being recorded. Completing your review promptly can help reduce processing delays and minimize the likelihood of restrictions when using features that depend on current confirmations.
Please access eServices using the link below. If you have already reviewed the materials and completed any required acknowledgements, no further action is needed. If you have not yet done so, please proceed promptly.
Link to access eServices:
View Your Statements (Dangerous link removed)
Thank you for your attention.
Before I dissect this email, it was sent to a different email address than the one I use with Questrade, a small detail that many people might miss.
Why The Email Looked Convincing
At first glance, the message appeared professional.
There were no obvious spelling mistakes. The grammar was solid. The email discussed annual disclosures, tax slip timelines, account acknowledgements, and statement inserts—exactly the sort of things a brokerage firm might legitimately contact investors about.
The message even included Questrade’s Toronto address and several paragraphs of legal fine print designed to make the email appear authentic.
If someone glanced quickly at the email on a phone, it would have been easy to assume it was genuine.
The First Red Flag: The Sender Address
The email identified itself as:
Questrade No-Reply login@ndxrstn.com
That was the first major problem.
Legitimate emails I receive from Questrade normally come from addresses ending in @questrade.com, such as:
Questrade No-Reply no-reply@questrade.com
Financial institutions do not normally send account-related emails from random domains that have nothing to do with their business.
The scammers were hoping recipients would notice the display name “Questrade” and never look at the actual email address.
The Second Red Flag: The Links
Every button and link in the email pointed to the same unfamiliar website.
Not Questrade.
Not a Questrade login page.
Not a Questrade document centre.
Instead, the links directed users to a strange domain with a random-looking name.
Whenever I receive an unexpected email from a bank, brokerage, or credit card company, I never click the links. If I think the message might be legitimate, I open a fresh browser window and go directly to the company’s website myself.
That simple habit has probably saved me from more than one phishing attempt over the years.
Why The Scam Was Clever
What impressed me most wasn’t the technology behind the scam.
It was the psychology.
The email never threatened to close my account.
It never claimed there was suspicious activity.
It never demanded immediate action.
Instead, it gently suggested that certain account features, updates, requests, or transactions could be affected if I didn’t review some annual disclosures.
That’s much more believable.
The scammers understood that investment firms regularly send notices about statements, tax documents, disclosures, and account reviews. Rather than inventing a fake crisis, they wrapped their phishing link inside a routine administrative request.
That’s exactly the sort of email many investors receive every year.
Why Timing Matters
The email arrived in late January, which was another smart move.
January and February are when investors begin expecting tax-related communications, annual statements, disclosure notices, and reminders from financial institutions.
The scammers chose a time when account holders were already primed to expect paperwork.
A phishing email sent at the right time can be much more convincing than the same email sent in the middle of summer.
What To Do If You Receive A Similar Email
If you receive an unexpected email from your bank, brokerage, credit card company, or investment firm:
- Do not click any links in the email.
- Check the sender’s actual email address.
- Hover over links to see where they really go.
- Open a new browser window and visit the company’s website directly.
- Log into your account normally and check for messages there.
If the notice is genuine, you’ll usually find it waiting inside your account.
The Fake Questrade Email That Almost Got Everything Right
This scammer got a lot of things right.
The email looked professional. The timing was clever. The subject matter was believable. The legal language sounded authentic. The message referenced processes that real brokerages actually use.
But they still made mistakes.
The sender address wasn’t a Questrade domain. The links didn’t lead to Questrade. And the email ended up exactly where it belonged—my spam folder.
The lesson here is simple. The most dangerous scam emails aren’t always the ones filled with spelling mistakes and wild promises. Sometimes they’re the ones that look almost normal.
Fortunately, “almost” wasn’t quite good enough.
One final note
Despite the fake email discussed above, I’m actually a real Questrade customer and have been for several years. The scam stood out to me partly because I’m familiar with how Questrade normally communicates with clients.
If you’re curious about why I chose Questrade and whether a self-directed investing approach might work for you, I’ve written a separate article called Do You Need a Financial Advisor or Can You DIY? where I discuss my own investing experience, some of the pros and cons of managing your own investments, and the platform I use.
Published by Cheryl @ The Lifestyle Digs on July 9, 2026.
