Occasionally, taxpayers may receive, either by telephone, mail, text message or email, a fraudulent communication that claims to be from the Canada Revenue Agency (CRA). In all these cases, the communication requests personal information, such as a social insurance, credit card, bank account, and/or passport numbers, from the taxpayer.

These fraudulent communications typically insist that this personal information is needed so that the taxpayer can receive a refund or benefit payment. Other communications urge taxpayers to visit a fake CRA website where the taxpayer is then asked to verify their identity by entering personal information. These are SCAMS and taxpayers should NEVER respond to these fraudulent communications, or click on any of the links provided.

To better equip taxpayers to identify those communications that do not come from the CRA, the following general guidelines are provided.

If you have signed up for online mail (available through MyAccount, My Business Account and Represent a Client), the CRA will do the following:

  • The CRA will send a registration confirmation email to the address provided once an individual or business has registered for the online mail service.
  • The CRA will also send an email to the address provided to notify you when new online mail is available to view in the CRA’s secure online services portal.

The CRA will not do the following:

  • The CRA will not send emails containing any links.
  • The CRA will not request personal information of any kind from a taxpayer by email or text message.
  • The CRA will not divulge taxpayer information to another person unless formal authorization is provided by the taxpayer.
  • The CRA will not send emails in English or French only: all communications are in both official languages.
  • The CRA will not leave any personal information on an answering machine.