Especially when they spoof the phone number to be from official numbers. Your first instinct is probably to check if the number really belongs to CRA/Canada Post/etc, and while the idea of being asked for payment via text in general should set off your suspicision, a genuine number could easily convince enough people to make a profit. Basically like the social engineering version of spoofing a TLS identity via a compromised certificate authority.