SCAMS AND SECURITY

Fraudsters frequently impersonate the CRA by phone, text, email and mail. Knowing how the CRA actually communicates is the best defence. Identity theft can also lead to fraudulent returns, benefit claims or changes to direct deposit.

THE CRA WILL NEVER

• Demand immediate payment by Interac e-Transfer, cryptocurrency, prepaid credit cards or gift cards.

• Threaten arrest, deportation or police involvement.

• Use aggressive or threatening language.

• Ask for personal information by text message or instant messaging.

• Send an email with a link asking for financial information.

• Give or ask for personal information of someone else without proper authorisation.

WHAT THE CRA MAY DO

• Call to verify identity by asking for a social insurance number, date of birth, or account information.

• Send email notifications that a message is waiting in My Account (without links to personal data).

• Send letters asking for documents or payment.

• Take legal action as a last resort, after several notices.

PROTECTING YOURSELF

• Verify any contact by signing in to My Account directly or calling the CRA using the number on its official website.

• Enable email notifications so that changes to address, direct deposit or account details are reported.

• Never share CRA sign-in credentials; use unique passwords and multi-factor authentication.

• Shred documents containing a social insurance number.

• Report scams to the Canadian Anti-Fraud Centre, and report identity theft to the CRA and the police.

IF YOUR IDENTITY IS COMPROMISED

Contact the CRA immediately so it can lock the account and add security flags; contact the bank and credit bureaus; and monitor My Account for unexpected changes, slips or benefit applications.