September 11, 2026 · 6 min read
An email arrives. It says you are a member of a class in a lawsuit you have never heard of, against a company you may have used once in 2019. It knows your name. It links to a domain that sounds like nothing. It gives you a deadline.
Every instinct you have been trained to apply says this is phishing. Unfamiliar sender, unfamiliar domain, personal information, urgency, a link. That training is the problem, because a genuine court-approved settlement notice has all four of those properties. The advice that protects you everywhere else misfires here, in both directions: people delete real notices, and people trust fake ones for reasons that have nothing to do with whether they are real.
There is a check that works. It is not a check on the email.
This is the part almost nobody is told, and it explains most of the confusion.
You do not join a class action. In most cases you are already in it, because the class is defined by something you did: you bought the product, you held the account, you worked the job. Class members are not recruited, they are identified.
When a court approves a settlement, it also orders that notice actually reach the class. Reaching them requires a list, and the only party holding that list is the defendant. So the defendant's own customer, account or employee records go to the court-appointed administrator for the purpose of sending notice.
That is why a real notice knows your name and knows which account is involved, without you ever having filed anything. It is not evidence of a leak, and it is not evidence of a scam. It is the mechanism working.
Which produces the trap: knowing your name proves nothing in either direction. A real notice knows it because of a court order. A fake one knows it because a breach or a data broker sold it. The single fact most people use to decide is the single fact that carries no information.
Settlement administration is a specialist industry. Administrators are firms appointed by the court to run notice, claims and distribution, and their claim portals almost never live on the defendant's website. They live on the administrator's own domains, and those domains read like nothing you would trust.
The Canadian government breach settlement is a useful example precisely because it is the least suspicious possible defendant. The case is Sweet v. His Majesty the King, Federal Court file T-982-20. The administrator is KPMG. The claim portal is at breachsettlementcanada.kpmg.ca.
Read that domain the way you would read it in an unexpected email about your CRA account. A subdomain you have never seen, on an accounting firm's website, about a government breach, asking you to enter personal details. It passes every test for looking like a scam, and it is the real one, published by the Government of Canada in its own notice of settlement approval.
An unfamiliar domain is the normal case for a genuine settlement notice. Sender-domain intuition is close to useless here, which is why it is worth replacing rather than sharpening.
A message cannot authenticate itself. Everything inside it, the letterhead, the case name, the legal-sounding paragraphs, the deadline, is written by whoever sent it. The only useful question is whether the thing it describes exists somewhere the sender does not control.
So take three items out of the email, and then leave the email alone:
Now look those up without touching anything in the message. In Canada, the Canadian Bar Association's National Class Action Database and CanLII are both free and both public: CanLII carries the actual court orders, and several provincial superior courts run their own class proceedings registries as well. A settlement large enough to email you is a settlement a court approved in writing, and that writing is published. Where a government body is the defendant, the approval is usually announced on a .gc.ca or .canada.ca page too.
If the case exists, the record will also name the administrator, and that name should match the one in your email. Then reach the portal by typing the address yourself.
If the case cannot be found anywhere outside the message, you are done. Real settlements leave a public paper trail before any notice goes out, because the notice is ordered by the court that created the trail. A case that exists only in your inbox does not exist.
These are structural rather than stylistic, so a well-written fake fails them exactly as a badly written one does.
Nearly all advice on this subject is about not being tricked. In this category the more common loss runs the other way: a real notice arrives, it fails somebody's phishing instincts, they delete it, and the deadline passes.
The asymmetry matters. Ignoring a fake notice costs nothing at all. Ignoring a real one costs whatever the claim was worth, and claim windows close permanently. If a message triggers your suspicion, the correct response is not to delete it, and not to click it, but to write down the case name and check it. That takes a few minutes and it resolves the question completely.
The same reasoning applies to physical mail. Postcard notices are still widely used, and a postcard that says you may be eligible in a case you do not recognise gets thrown out for the same reasons. It carries the same case name and the same file number, and it survives the same check.
PayUpBro runs a version of this check as a pipeline. A discovery pass finds candidate settlements; a verification pass has to locate a live claim page on the court-appointed administrator's own domain and independently corroborate the settlement before the row can be published. Known aggregator and listing hosts are rejected as claim links outright, and a recognised administrator domain is treated as a supporting signal rather than a pass: independent confirmation is required either way, for the same reason it is required of you.
Where a court and a file number could be confirmed, the settlement page shows them, so you can take those two items to CanLII yourself rather than taking our word for it. The whole point of publishing the court file number is that it makes us checkable.
See every settlement currently open in Canada and the US →
Or just the ones filable without a receipt →
Because you were identified from the defendant's own records under a court order, not recruited. See the mechanism above. It is the ordinary way notice happens.
No. Filing with the administrator is free in every case, and no legitimate step in a distribution requires a payment from you.
On its own, no, and this is the one place that heuristic should be set aside. Administrator portals routinely sit on unfamiliar domains. Verify the case and the named administrator through public records, then type the address in yourself.
Clicking a link is not the same as giving anything away. If you entered a password anywhere, change it and turn on two-factor authentication for that account. If you entered banking details or paid a fee, contact your bank rather than replying to the message. If you only looked, verify the case and carry on.
A notice too vague to check is itself the answer, but before concluding that, search the defendant's own website and newsroom for a settlement statement. Defendants are frequently required to publish one, and it will name the administrator.
PayUpBro is not a law firm and never files a claim for you. This page describes how to read publicly available settlement notices; it is not legal advice. Whether you may be eligible in any particular settlement is decided by the court-appointed administrator, not by us.