Protect your CRA accounts – Scams and fraud - CRA

You may be looking for:

There are many things you can do to help protect your CRA online accounts from potential identity theft or fraud.

On this page

Monitor your accounts regularly

Monitor your CRA online accounts regularly for suspicious activity. Some things to look out for:

Check your CRA online account information using CRA sign-in services.

You may also call our automated phone service to check your tax account balances, benefit payment details, and get general tax information: Tax Information Phone Service (TIPS).

Receive email notifications from the CRA

Sign up to receive email notifications from the CRA. Make sure we have your current email address since it will be used to send email notifications about changes to your CRA online accounts.

Change your user IDs and passwords regularly

Your user ID, passwords, along with, your security questions and answers should be changed on a regular basis.

Do not share user IDs and passwords with anyone else.

Use unique and strong passwords

For added security, never use the same password for your various online accounts. For example, use different passwords for your CRA accounts and your online banking accounts.

Make sure your passwords are complex and difficult for others to guess.

Keep your contact information up to date

If the CRA notices any suspicious activity on your account, they may need to contact you. Make sure your contact details are up to date, including your:

Set up a Personal Identification Number (PIN)

The PIN can be used for certain services and provides added security to identify yourself when you call the CRA.

When creating your PIN:

For details: Use a PIN when you call us

Authorize a representative

You can authorize another person, such as a friend, family member, or an accountant to represent you for your tax matters. This person must be registered for Represent a Client before you can give them access to your online tax information.

Once authorized, they can sign in to access your online information using Represent a Client.

For details: Authorize a representative

Verify corporate registry information

Make sure the list of directors and their contact information are up to date on applicable federal, provincial or territorial corporate registries.