How to recognize a CRA scam

Samantha Kohn, Freelance Blogger

March 27, 2025

* This article is sponsored by Equifax.

The deadline for individuals to file their tax returns is April 30, meaning it’s tax season in Canada. While many Canadians are busy organizing their finances, scammers are equally active, posing as Canada Revenue Agency (CRA) officials to deceive unsuspecting taxpayers. These fraudsters use various tactics, including phone calls, emails and text messages, to trick you into revealing personal information or sending money for fictitious taxes owed.

Here’s how to spot these scams and protect yourself from identity fraud in Canada.

What is a CRA scam?

A CRA scam involves criminals impersonating CRA staff to steal your personal information or money. They use phishing techniques — like emails, phone calls and text messages meant to seem like they come from the CRA — to create a false sense of urgency and pressure you into acting quickly.

Common tactics used by scammers attempting a CRA scam include:

Threats and intimidation

Scammers may claim you owe taxes and threaten legal action, arrest or even deportation if you don’t pay right away. For example, they might say, “Pay now, or the police will arrest you.”

The CRA does not use aggressive or threatening language and will never demand immediate payment through a phone call or email. So, if you hear this approach on the other end of the line, hang up — it’s a CRA scam phone call.

Unusual payment methods

Fraudsters often demand payment through unconventional means, like cryptocurrency (e.g., Bitcoin) or gift cards. The CRA doesn’t accept payments through these methods, so that’s a sign of a scam.

Urgent requests for personal information

Scammers might send emails or texts urging you to click a link and provide your Social Insurance Number (SIN), banking information or credit card details.

The CRA does not send emails with links requesting personal or financial information, so if you get one, don’t act on it — it’s likely a CRA scam email.

What can happen if your identity is stolen?

Falling victim to a CRA scam can lead to identity theft, which criminals use to commit fraud in your name. Once they get enough of your personal details, they can:

Steal your money by accessing your bank accounts.
Open credit cards or loans in your name.
Damage your credit score, making it harder to get credit or a mortgage.
File fraudulent tax returns using your identity to claim refunds.

The emotional toll of identity fraud in Canada can be devastating, leading to stress, financial loss and frustration as you work to restore your identity. Recovery can take months or even years, making ID fraud protection crucial.

Why might the CRA contact someone?

At times, the CRA does reach out to taxpayers for legitimate reasons.

These are the main reasons CRA may contact you:

Requesting additional information for tax assessment purposes or to verify your identity.
Notifying you of unfiled tax returns, overdue payments, progress on your tax assessment, and other tax topics.
Discussing account issues, such as incorrect banking details or the revoking of your CRA user ID and password.
Offering a service, such as helping you to access tax credits or benefits.

If you get a call focused on anything other than the reasons above, be on the safe side and assume it’s a CRA scam.

How does the CRA contact you?

Taking a close look at both the content and the delivery method can help you determine if a message is real or fraudulent. The CRA may legitimately contact you through any of the following channels, but it’s key to stay alert as to what they’re saying when they reach out.

Phone call: The CRA may call you to request information, notify you about something (for example, that your tax return is being reviewed) or offer a service, but it will never demand immediate payment or use aggressive tactics.
Email: If you’ve registered for email notifications from the CRA, it may email you about new messages in your CRA online account. The CRA can also email you if you spoke to a CRA agent and requested that they send you a form, publication or link. The CRA does not send emails that ask you to reply or click a link to submit personal information or payment.
Text message: The CRA only sends texts for multi-factor authentication (MFA) for online CRA accounts. It will not text you about tax refunds, credits, benefits, payments, etc., or ask you to click a link.
Mail: The CRA may send a letter to your registered address to request information, notify you about something or offer a service.
Online account: The CRA communicates through secure messages in your CRA online account.

The CRA does not use social or instant messaging apps such as WhatsApp or Facebook Messenger to contact taxpayers.

If you’re ever unsure whether a message is legitimate, you can verify by contacting the CRA directly at 1-800-959-8281.

What to do if you get a CRA scam email or phone call

If you receive a suspicious CRA scam phone call or email, follow these steps:

If you take one thing away from this article, let it be this: Do not provide any personal information. Scammers rely on fear tactics to trick you into sharing details.
Do not click on links or open attachments in unsolicited emails or texts.
Hang up immediately if the call seems suspicious or the caller is aggressive or threatening.
Verify with the CRA by calling 1-800-959-8281.
Report the incident to the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501.

How to recover from identity theft

If you are the victim of identity fraud in Canada, recovery can take time. However, there are steps you can take to regain control.

Here’s what to do if you think your identity has been stolen:

Work with authorities and financial institutions. Contact the police, your financial institutions and credit card companies to monitor your accounts and resolve fraudulent activity.
Monitor your credit reports. Contact Canada’s credit bureaus, including Equifax, to place a fraud alert on your file. This signals to lenders that they should take extra steps to verify your identity if they get an application in your name.
Update security measures. Change passwords for online banking, government accounts and any other sensitive accounts to ensure your information stays secure.
Stay vigilant with financial transactions. Regularly review bank statements, credit card transactions and your CRA account to catch any unauthorized activity early.
Seek identity restoration support. Equifax Complete^TM Protection provides access to an identity restoration specialist who can guide you through the recovery process and help correct fraudulent records.

Proactive identity restoration: ID theft protection in Canada

Being proactive about ID theft protection can reduce the chances of becoming a victim of identity theft. Subscribing to Equifax Complete Protection not only helps to reduce the risk of identity theft but also provides support if you’ve been targeted.

Equifax Complete Protection is a multi-layered credit and cybersecurity service. It provides a wide range of features, including credit monitoring and access to a dedicated identity restoration specialist, who can assist you with contacting places where fraud occurred, placing fraud alerts with Canada’s credit bureaus and more.

Plus, Equifax Complete Protection offers identity theft insurance of up to $1 million (not available for new purchases in Quebec) to cover out-of-pocket expenses related to recovery.

The bottom line

Tax season is a prime time for fraudsters looking to exploit unsuspecting Canadians. Understanding how CRA scams work and recognizing the warning signs can provide ID theft protection and help protect your personal and financial information.

If you receive a suspicious CRA scam phone call or email, remain cautious, verify directly with the CRA, and report any fraudulent activity. Staying proactive with ID fraud protection can help you safeguard your identity.

Get more details about Equifax Complete Protection.

Categories	Personal Finance
Tags	fraud identity theft tax