Published: May 29, 2026
Overview of CRA Phishing Scams, CRA Fraud Calls, and Taxpayer Identity Theft in Canada
CRA phishing scams and CRA impersonation fraud continue to increase across Canada, particularly during tax-filing season and periods involving government benefit payments. The Canada Revenue Agency (CRA) continues to warn Canadian taxpayers about sophisticated phishing scams involving fraudsters impersonating the CRA through telephone calls, text messages, emails, and fraudulent CRA login websites.
Modern CRA tax scams are increasingly sophisticated and may involve:
- Fake CRA refund notifications
- CRA scam text messages
- CRA phishing emails
- Fraudulent CRA phone calls
- Artificial intelligence-generated voice scams
- Fake CRA My Account login pages
- Taxpayer identity theft schemes
- Fraudulent requests for tax payments
These scams often attempt to obtain:
- Social Insurance Numbers (SINs)
- Banking information
- CRA login credentials
- Corporate tax account access
- Personal financial information
Canadian taxpayers and business owners should understand how these scams operate and the serious tax and financial consequences that may result from compromised taxpayer information.
Common CRA Tax Scams and CRA Impersonation Fraud Affecting Canadian Taxpayers
Fake CRA Refund Scams and CRA Phishing Emails
One of the most common CRA phishing scams involves fake CRA refund notices sent through email or text message. These fraudulent communications commonly claim the taxpayer is entitled to a tax refund, GST/HST credit, carbon tax rebate, or other government payment.
The taxpayer is typically instructed to click a link directing them to a fraudulent CRA-style website requesting:
- CRA login credentials
- Banking information
- Credit card details
- SIN information
- Personal identification documents
The CRA generally does not send refund payments through text message links or Interac e-Transfers.
CRA Scam Phone Calls and Tax Collection Threats
CRA impersonation fraud frequently involves aggressive telephone calls from scammers pretending to be CRA collection officers or CRA investigators.
These CRA scam calls may include threats involving:
- Immediate arrest
- Criminal prosecution
- Deportation
- Wage garnishment
- Asset seizure
- Freezing of bank accounts
Fraudsters commonly pressure taxpayers to make immediate payment using:
- Cryptocurrency
- Gift cards
- Prepaid credit cards
- Wire transfers
Legitimate CRA collections procedures do not involve demands for payment through cryptocurrency or gift cards.
Fake CRA Websites and CRA My Account Identity Theft Risks
Some CRA phishing scams involve fraudulent websites designed to imitate CRA My Account login pages. These websites may closely resemble legitimate Government of Canada webpages and are often designed to steal taxpayer login credentials.
Where fraudsters gain access to CRA My Account credentials, consequences may include:
- Fraudulent tax return filings
- Unauthorized changes to direct deposit information
- Identity theft
- Unauthorized government benefit claims
- Tax reassessments
- Delayed tax refunds
- Corporate tax account compromise
- Unauthorized access to sensitive financial information
Taxpayers sometimes only discover the fraud after refunds have been redirected or fraudulent tax filings have occurred.
How the CRA Actually Contacts Canadian Taxpayers
Understanding legitimate CRA communication methods may help taxpayers identify CRA phishing scams and CRA impersonation fraud.
The CRA may communicate through:
- CRA My Account notifications
- Official letters
- Telephone calls in certain circumstances
- Email notifications advising that CRA mail is available online
However, the CRA does not:
- Send threatening arrest notices by text message
- Demand immediate payment through cryptocurrency
- Request sensitive personal information through unsolicited links
- Issue tax refunds through text-message hyperlinks
- Use threatening or abusive language
- Demand payment using gift cards
Taxpayers should independently verify all CRA communications before responding.
Tax Consequences of CRA Identity Theft and CRA Account Fraud
CRA phishing scams may create serious legal and tax consequences for Canadian taxpayers and businesses.
Compromised taxpayer information may result in:
- Fraudulent tax filings
- Unauthorized GST/HST filings
- Payroll account compromise
- Corporate tax fraud
- Benefit fraud investigations
- CRA compliance reviews
- Delayed tax refunds
- Tax reassessments
- Identity theft-related financial losses
Taxpayers affected by identity theft may need to demonstrate to the CRA that unauthorized filings or financial changes were fraudulent.
Taxpayers who suspect CRA account fraud should immediately:
- Change passwords
- Enable multi-factor authentication
- Contact the CRA
- Notify financial institutions
- Monitor credit reports
- Preserve records of fraudulent communications
- Report the incident to the Canadian Anti-Fraud Centre
CRA Phishing Scams and Cybersecurity Risks for Canadian Businesses
Canadian businesses face heightened exposure to CRA phishing scams because corporate taxpayers often maintain:
- Payroll accounts
- GST/HST accounts
- Corporate tax accounts
- Business banking information
- Employee payroll data
Businesses should consider implementing:
- Multi-factor authentication
- Employee phishing-awareness training
- Internal cybersecurity controls
- Verification procedures for CRA communications
- Segregated approval procedures for financial transfers
- Routine password changes
Experienced Canadian tax lawyers and cybersecurity professionals may assist businesses responding to tax-related identity theft or fraudulent CRA account activity.
Pro Tax Tips About CRA Phishing Scams and CRA Identity Theft
Canadian taxpayers should never click links contained in unsolicited CRA emails or CRA text messages. Instead, taxpayers should independently access CRA My Account through the official Government of Canada website.
Taxpayers should also regularly monitor their CRA account activity and banking information for unauthorized changes. Business owners, professionals, and high-net-worth individuals may face increased exposure to CRA impersonation fraud because scammers often target taxpayers believed to possess significant financial assets or expected tax refunds. Taxpayers should remain cautious whenever communications involve urgency, threats, or demands for immediate payment.
FAQ About CRA Phishing Scams and CRA Impersonation Fraud
What is a CRA phishing scam?
A CRA phishing scam involves fraudsters impersonating the Canada Revenue Agency to obtain personal information, banking information, CRA login credentials, or payments from taxpayers.
Does the CRA send text messages requesting banking information?
No. Taxpayers should exercise caution regarding unsolicited text messages requesting sensitive financial information.
Can CRA phishing scams result in identity theft?
Yes. Fraudsters may use stolen taxpayer information to access CRA accounts, redirect refunds, or file fraudulent tax returns.
What payment methods are commonly requested in CRA scam calls?
Fraudsters often request cryptocurrency, gift cards, prepaid credit cards, or wire transfers.
What should taxpayers do after responding to a CRA phishing message?
Taxpayers should immediately change passwords, contact the CRA, notify financial institutions, monitor credit reports, and preserve records relating to the suspected fraud.
Key Takeaways About CRA Phishing Scams, CRA Fraud Calls, and Taxpayer Identity Theft
CRA phishing scams and CRA impersonation fraud continue to evolve rapidly in Canada. Fraudsters increasingly use sophisticated phishing techniques, artificial intelligence-generated communications, fake CRA websites, and social engineering tactics to target Canadian taxpayers and businesses. Taxpayers should independently verify all CRA communications, avoid clicking unsolicited links, and immediately respond to signs of identity theft or unauthorized CRA account activity. Early intervention may significantly reduce both financial losses and future CRA compliance complications.
Disclaimer: This article provides broad information. It is only accurate as of the posting date. It has not been updated and may be out-of-date. It does not give legal advice and should not be relied on as tax advice. Every tax scenario is unique to its circumstances and will differ from the instances described in the article. If you have specific legal questions, you should seek the advice of an experienced Canadian tax lawyer.
About the Author
