Slam the scam – Protect yourself against fraud
CRA account security
If you suspect you're the victim of a cyber incident, fraud or identity theft, call the CRA.
For more tips on protecting your CRA accounts, go to Your CRA account security.
Examples of fraudulent communications
Know how to recognize a scam
How to protect yourself from identity theft
Report a scam
What to do if you were scammed?
Scam stories
External resources
Print-ready posters and handout for service providers
Know how to recognize a scam
There are many fraud types, including new ones invented daily.
Taxpayers should be vigilant when they receive, either by telephone, mail, text message or email, a fraudulent communication that claims to be from the Canada Revenue Agency (CRA) requesting personal information such as a social insurance number, credit card number, bank account number, or passport number.
These scams may insist that this personal information is needed so that the taxpayer can receive a refund or a benefit payment. Cases of fraudulent communication could also involve threatening or coercive language to scare individuals into paying fictitious debt to the CRA. Other communications urge taxpayers to visit a fake CRA website where the taxpayer is then asked to verify their identity by entering personal information. These are scams and taxpayers should never respond to these fraudulent communications or click on any of the links provided.
To identify legitimate communications from the CRA, be aware of these guidelines and know what to expect when the CRA contacts you.
By phone
The CRA may
- verify your identity by asking for personal information such as your full name, date of birth, address and account, or social insurance number
- ask for details about your account, in the case of a business enquiry
- contact individuals or businesses about a tax debt
- call you to begin an audit process
- call you to offer free tax help for your small business
- call your organization or association to offer support in helping your clients access benefits and credits
The CRA will never
- demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others
- use aggressive language or threaten you with arrest or sending the police
- leave voicemails that are threatening or give personal or financial information
By email
The CRA may
- notify you by email when a new message or a document, such as a notice of assessment or reassessment, is available for you to view in secure CRA portals such as My Account, My Business Account, or Represent a Client
- email you a link to a CRA webpage, form, or publication that you ask for during a telephone call or a meeting with an agent (this is the only case where the CRA will send an email containing links)
The CRA will never
- give or ask for personal or financial information by email and ask you to click on a link
- email you a link asking you to fill in an online form with personal or financial details
- send you an email with a link to your refund
- demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others
- threaten you with arrest or a prison sentence
By mail
The CRA may
- ask for financial information such as the name of your bank and its location
- send you a notice of assessment or reassessment
- ask you to pay an amount you owe through any of the CRA's payment options
- take legal action to recover the money you owe, if you refuse to pay your debt
- write to you to begin an audit process
- write to you to offer free tax help for your small business
The CRA will never
- set up a meeting with you in a public place to take a payment
- demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others
- threaten you with arrest or a prison sentence
By text messages/instant messaging
The CRA never uses text messages or instant messaging such as Facebook Messenger or WhatsApp to communicate with taxpayers about tax-related issues under any circumstance. If a taxpayer receives text or instant messages claiming to be from the CRA, they are scams!
When in doubt, ask yourself
- Why is the caller pressuring me to act immediately? Am I certain the caller is a CRA employee?
- Did I file my tax return on time? Have I received a notice of assessment or reassessment saying I owe tax?
- Have I received written communication from the CRA by email or mail about the subject of the call?
- Does the CRA have my most recent contact information, such as my email and address?
- Is the caller asking for information I would not give in my tax return or that is not related to the money I owe the CRA?
- Did I recently send a request to change my business number information?
- Do I have an instalment payment due soon?
- Have I received a statement of account about a government program I owe money to, such as employment insurance or Canada Student Loans?
If you do have a debt with the CRA and can't pay in full, take action right away. For more information, go to When you owe money – collections at the CRA.
How to protect yourself from identity theft
- Never provide personal information through the Internet or by email. The CRA does not ask you to provide personal information by email.
- Be suspicious if you are ever asked to pay taxes or fees to the CRA on lottery or sweepstakes winnings. You do not have to pay taxes or fees on these types of winnings. These requests are scams.
- Keep your access codes, user ID, passwords, and PINs secret.
- Keep your address current with all government departments and agencies.
- Choose your tax preparer carefully! Make sure you choose someone you trust and check their references. Always review your return, agree with the content before filing, and follow up to make sure you receive your notice of assessment, since it contains important financial and personal information that belongs to you.
- Monitor your tax accounts by registering for My Account or My Business Account. Once registered, sign up for email notifications (account alerts), which will notify you of changes made to your accounts (e.g. change in address or direct deposit information) or if paper mail from the CRA was returned.
- Before supporting any charity, use the CRA website to find out if the charity is registered and get more information on the way it does business.
- Be careful before you click on links in any email you receive. Some criminals may be using a technique known as phishing to steal your personal information when you click on the link.
- Caller ID is a useful function. However, the information displayed can be altered by criminals. Never use only the displayed information to confirm the identity of the caller whether it be an individual, a company or a government entity.
- Protect your social insurance number. Don't use it as a piece of ID and never reveal it to anyone unless you are certain the person asking for it is legally entitled to that information. If an organization asks for your social insurance number, ask if it is legally required to collect it, and if not, offer other forms of ID.
- Pay attention to your billing cycle and ask about any missing account statements or suspicious transactions.
- Shred unwanted documents or store them in a secure place. Make sure that documents with your name and SIN are secure.
- Immediately report lost or stolen credit or debit cards.
- Carry only the ID you need.
- Do not write down any passwords or carry them with you.
- Ask a trusted neighbour to pick up your mail when you are away or ask that a hold be placed on delivery.
Report a scam
- By phone
- Call the Canadian Anti-fraud Centre to report a scam
- Telephone number
1-888-495-8501
- Hours
Day Hours Mon to Fri 10 am to 4:45 pm (Eastern time) Sat and Sun Closed
What to do if you were scammed?
If you suspect you may be the victim of fraud or have been tricked into giving personal or financial information, contact your local police service.
If your social insurance number (SIN) has been stolen, you should contact Service Canada at 1-866-274-6627. For more information, see Social Insurance Number (Service Canada website).
You should contact the CRA if you:
- think your CRA user ID or the password you use in personal dealings with the CRA has been compromised.
- want to disable online access to your information on the CRA login services.
- want to re-activate online access to your information after it has been disabled.
If the CRA has confirmed that a taxpayer's information has been compromised, the Agency will act to prevent the fraudulent use of the information involving systems and processes for which the CRA is responsible.
Call the CRA at 1-800-959-8281 for individuals and 1-800-959-5525 for businesses to request that enhanced security measures be placed on your account. These measures will ensure CRA call centre agents ask additional security questions to determine a caller’s identity.
If you have had your account compromised and are unable to comply with your tax obligations, you may be eligible for taxpayer relief or any resulting interest or penalties. To submit your request for relief, please complete Form RC4288, Request for Taxpayer Relief - Cancel or Waive Penalties or Interest.
Scam stories
-
Select the image below to read their story
Image description
Meet Mary & William
Mary and William are a married couple with kids. They have fallen victim to a donation tax shelter scheme.
Find out more about Mary and William's story and how you can protect yourself against fraud. -
Select the image below to read her story
Image description
Meet Amy
Amy is a young professional. She has fallen victim to a telephone phishing scam.
Find out more about Amy's story and how you can protect yourself against fraud. -
Select the image below to read her story
Image description
Meet Irene
Irene is 80 years old. She has fallen victim to an e-mail phishing scam.
Find out more about Irene's story and how you can protect yourself against fraud. -
Select the image below to read his story
Image description
Meet Samuel
Samuel is 75 years old. He has fallen victim to a sweepstakes scam.
Find out more about Samuel’s story and how to protect yourself from fraud.
External resources
- Competition Bureau
- Canadian Anti-Fraud Centre
- Immigration, Refugees and Citizenship Canada
- Office of Consumer Affairs
- Get Cyber Safe
- Consumer Measures Committee
- Office of the Privacy Commissioner of Canada
- Royal Canadian Mounted Police
- Financial Consumer Agency of Canada
- Equifax and TransUnion Canada are two services that gather credit information on almost all individuals. At your request, these services can place an indicator or flag on your credit file to alert you of any changes.
Print-ready posters and handout for service providers
Print-ready posters
-
Email poster
Poster description
Slam the scam!
The Canada Revenue Agency:
- NEVER asks for OR provides financial information via email
- NEVER sends text messages to communicate with taxpayers under any circumstances
- NEVER asks you to click a link (unless you request a link over the phone)
For more information, go to canada.ca/taxes-fraud-prevention
-
Phone poster
Poster description
Slam the scam!
The Canada Revenue Agency will:
- NEVER use aggressive language or tone
- NEVER threaten to arrest or deport you
- NEVER ask for prepaid credit cards or gift cards
For more information, go to canada.ca/taxes-fraud-prevention
-
E-transfer poster
Poster description
Slam the scam!
The Canada Revenue Agency will never send or request e-transfers of any kind!
CRA will only send you payments by direct deposit or by cheque in the mail.
For more information, go to canada.ca/taxes-fraud-prevention
-
Protecting your personal information poster
Poster description
The title text across the top of the image states:
Protecting your personal information
In the top left corner, to the left of the title, is an image of a hand holding a padlock.
Below the title, on the left hand side of the image, is the following text:
You can :
- sign up for:
- My Account (canada.ca/my-account)
- My Business Account (canada.ca/my-cra-business-account)
- opt to receive email notifications once you have signed up for these accounts
- call the CRA at 1-800-959-8281 for individuals or 1-800-959-5525 for businesses to
- set up a unique Personal Identification Number (PIN) on your tax account for call centre agents to access your account(s)
- confirm the legitimacy of a CRA caller
Below the title, on the right hand side of the image, is the following text:
The Canada Revenue Agency:
- has strong security protocols for its systems and portals that help safeguard taxpayer information
- follows strict authentication processes to confirm a caller’s identity
- has detailed information on its website about fraud and scam prevention
Underneath the text on the right hand side are three hexagons side-by-side. One hexagon has an image of a shield with a padlock in it. The second is an image of two text boxes with a padlock. The third image is a computer monitor.
- sign up for:
-
Prepaid credit card poster
Poster description
Slam the scam!
The Canada Revenue Agency does not accept payments via gift cards or Bitcoin.
Accepted payment methods are:
- Online banking
- Debit
- Pre-authorized debit
- PayPal/credit card (through a third party provider)
For more information, go to canada.ca/taxes-fraud-prevention
-
Caller ID spoofing poster
Poster description
Slam the scam!
Scammers can fake their caller ID. If you receive a call saying you owe money to the Canada Revenue Agency:
- Check your account balance in My Account at canada.ca/my-cra-account or
- Call us at 1-888-863-8657 to speak with a CRA agent
For more information, go to canada.ca/taxes-fraud-prevention
-
Digital Services poster
Poster description
Slam the scam!
Protect yourself against fraud by registering for the Canada Revenue Agency’s My Account at canada.ca/my-cra-account
With My Account you can:
- Check if you owe money
- Sign up for email notifications to know when changes are made on your account
- Keep your personal profile up to date
For more information, go to canada.ca/taxes-fraud-prevention
Third language posters - Coming soon
Handouts
When the CRA contacts you, it makes sure your personal information is protected. These handouts explain what the CRA will and will not do when making contact with taxpayers.
What to expect when the Canada Revenue Agency contacts you (HTML)
What to expect when the Canada Revenue Agency contacts you (PDF, 1.1 MB)
Report a problem or mistake on this page
- Date modified: