← All free tools
CRA scams: check before replying
Recognize suspicious CRA messages and verify contact through official channels.
A message is not proof of identity
CRA may contact you by phone, letter or email. A real phone verification can ask identity questions; do not give information until you verify the caller independently. CRA texts can be legitimate sign-in authentication codes, but are not e-transfer refund or payment links.
Stop and verify if you see these requests
Gift cards, cryptocurrency or threats of arrest/deportation are scam signals. Do not use a refund link from an unexpected text. Go to the official CRA website yourself; do not rely on an incoming caller ID.
If information was exposed
Use the reporting and account-protection steps on the official CRA scams page. Contact your financial institution promptly if money or banking access may be at risk.