The CRA website was recently a victim of a cyber attack. In response, the CRA shut down its website and various portals to lower the security risks.
As of the August 18, 2020, the CRA has regained their online presence and are opening their portals one by one.
The CRA has stated that they will contact anyone affected by the cyber attack by letter sent to your mailing address.
This breach has brought out scammers once again and the CRA has released the following tips to help you identify legitimate communications from them.
BY PHONE
The CRA may:
- verify your identity by asking for personal information such as your full name, date of birth, address and account, or social insurance number
- ask for details about your account, in the case of a business enquiry
- call you to begin an audit process
The CRA will never:
- ask for information about your passport, health card, or driver’s license
- demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others
- use aggressive language or threaten you with arrest or sending the police
- leave voicemails that are threatening or give personal or financial information
BY EMAIL
The CRA may:
- notify you by email when a new message or a document, such as a notice of assessment or reassessment, is available for you to view in secure CRA portals such as My Account, My Business Account, or Represent a Client
- email you a link to a CRA webpage, form, or publication that you ask for during a telephone call or a meeting with an agent (this is the only case where the CRA will send an email containing links)
The CRA will never:
- give or ask for personal or financial information by email and ask you to click on a link
- email you a link asking you to fill in an online form with personal or financial details
- send you an email with a link to your refund
- demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others
- threaten you with arrest or a prison sentence
BY MAIL
The CRA may:
- ask for financial information such as the name of your bank and its location
- send you a notice of assessment or reassessment
- ask you to pay an amount you owe through any of the CRA’s payment options
- take legal action to recover the money you owe, if you refuse to pay your debt
- write to you to begin an audit process
The CRA will never:
- set up a meeting with you in a public place to take a payment
- demand immediate payment by Interac e-transfer, bitcoin, prepaid credit cards or gift cards from retailers such as iTunes, Amazon, or others
- threaten you with arrest or a prison sentence
BY TEXT MESSAGES/INSTANT MESSAGING
The CRA never uses text messages or instant messaging such as Facebook Messenger or WhatsApp to communicate with taxpayers under any circumstance. If a taxpayer receives text or instant messages claiming to be from the CRA, they are scams!
More information on tax scams and fraud can be found at canada.ca/taxes-fraud-prevention.
To report scams, go to antifraudcentre.ca or call 1-888-495-8501. If you think you may be the victim of fraud or you unknowingly provided personal or financial information, contact your local police service, financial institution, and credit reporting agencies.
