Dear Valued Customers,
Starting June 2, 2026, Castle Fuels (2008) Inc. will introduce a One-Time Passcode (OTP) requirement for SuperPass fuel card transactions at the pump. The reason behind this decision by Suncor Energy is to improve security and prevent unauthorized use—thus providing customers with the peace of mind that their accounts are secure and not incurring any unauthorized transactions. With this update, when card holders fuel up, they will insert their card, receive a text message with a one-time code, and enter it to complete the transaction.
To prepare, Castle Fuels account holders must provide three key pieces of information:
- Card number
- Cardholder’s name
- Cardholder’s mobile phone number
Customers can input this information into an Excel file (download here) and return it promptly to receivables@castlefuels.ca to avoid service interruptions. After submission, drivers will receive a verification text from Petro-Canada and must reply “YES” to activate OTP. If not received, they should check spam or junk folders.
No new cards are needed. OTP applies only at networked PetroPass locations. Existing PINs will still work at retail locations, non-networked sites, mobile cardlocks, in-store purchases, and washroom access. Transactions will be declined if the correct OTP is not entered.
We apologize for any inconvenience and appreciate your cooperation. Please contact us at info@castlefuels.ca with any questions, comments or concerns.
Sincerely,
Robert R. Vandriel, President & Owner
Castle Fuels (2008) Inc.
How It Works
- Insert your SuperPass card at the pump as you normally do
- When prompted by the card reader at the pump, press 1, then enter to continue
- Select the pump number
- You’ll receive a one-time code by text message on your phone
- Enter the code to complete the transaction
FAQs
Q: Why is this change being introduced?
A: To protect customers from fraud and unauthorized card use. This added security helps prevent unexpected charges and gives customers more confidence when using their cards.
Q: Will customers need new fuel cards?
A: No. Their current SuperPass cards will continue to work as usual.
Q: What happens if a driver doesn’t receive the verification text?
A: Ask them to check their spam or junk folder. If it’s still not received, they should contact us for assistance.
Q: What if a customer doesn’t submit their driver information?
A: Their service may be disrupted, as OTP cannot be activated without verified phone numbers.
Q: Where is OTP required?
A: Only at networked PetroPass Cardlock sites. Other locations (Radium, Canal Flats, Elko) will continue using the existing PIN system. Current PINs will also work in the retail stores as well as washrooms.
Q: What if the OTP is entered incorrectly?
A: The transaction will be declined, and the driver will need to retry with the correct code.
Q: Does this make fueling slower?
A: The process only adds a few seconds and significantly increases security—most users find it quick and easy after the first use.
Q: What should I do with active cards that aren’t currently assigned to an employee?
A: Customers can update card and user information as it changes by emailing receivables@castlefuels.ca with their requests. If a customer currently has an active card with no employee assigned to that card, please notify us with the employee’s name and phone number and their information will be added to the system so that they can receive OTP text messages.
Q: What is Castle Fuels doing to ensure my name and phone number are secure?
A: Protecting customer information is a top priority. The names and phone numbers provided are used solely for OTP verification and account security purposes. This information is handled through secure systems and is only shared with trusted partners (such as Petro-Canada) as needed to enable the verification process. It is not used for marketing or any unrelated purposes, helping ensure your personal information remains safe and confidential.
Q: Will Castle Fuels or Suncor Energy ever call or text me outside of the needing to send me OTP verification?
A: In most cases, no, Castle Fuels and/or Suncor Energy will not send you text messages or call you outside of sending you OTP verification. The only exception to this, is if your phone number is one of the contact numbers we have on file for your account and we need to speak with you.
Q: Can a card have more than one person/phone number associated with it?
A: At the moment, no, but Suncor Energy is currently developing a feature that will allow up to 50 phone numbers to be assigned to each card. If customers provide the relevant mobile numbers for each card, we will upload them once this functionality becomes available.
