.png)
Is your phone ringing off the hook with fake calls from the “CRA”? Are you receiving emails insisting you click a link to claim a refund? Maybe you’ve seen text messages promising a benefit payment or tax refund.
Not only are these annoying — they’re also signs of scams.
Fraud continues to rise across Canada. According to the Canadian Anti-Fraud Centre, Canadians lost over $704 million to fraud in 2025, and those numbers likely represent only a fraction of the true losses because many incidents go unreported.
Scammers are becoming more sophisticated every year, often impersonating trusted organizations like the Canada Revenue Agency (CRA) to trick people into giving up personal information or sending money.
That’s why we wanted to break down some of the most common tax scams, how to tell imposters from the real CRA, and how to keep your money and information safe.
Common tax scam tactics
1. CRA phone scams: the automated phone call
“The reason behind this call is to notify you that we have registered a criminal case against your name concerning tax evasion and fraud in federal court…”
If you’ve received a call like this, you’re not alone.
Typically, an unfamiliar number will call and an automated voice will claim you’re under investigation by “Revenue Canada” or another government agency. The message often says you’ll be connected to an agent — whose real goal is to collect your personal information.
Common variations include claims that:
- Your SIN number has been compromised
- You owe back taxes
- You have an outstanding legal case
- You committed a financial crime
- You have unpaid balances
The scammers may threaten arrest, fines, or even deportation if you don’t act immediately. They may also request payment through unusual methods such as:
- Bitcoin or cryptocurrency
- Wire transfers
- Gift cards (iTunes, Google Play, Steam, etc.)
These threats are meant to scare you into acting quickly.
Here’s the good news: there are some easy ways to tell a scam call from a real CRA call.
The CRA is a bureaucratic (and let’s be honest — mildly boring) institution. They will not use aggressive, intimidating or threatening language, and they won’t demand personal information through voicemail.
A legitimate CRA call will usually be about a specific issue on your account — not a vague threat of criminal charges.
Also remember:
- The CRA will not demand immediate payment over the phone
- The CRA will never ask for payment using gift cards
- The CRA will not threaten arrest or deportation
If you’re unsure whether a call is legitimate, hang up and contact the CRA directly through their official website or phone number.
How do you know it’s the CRA? See these tips to help you verify if they’re the real deal.
View sample telephone scams on the Canadian Revenue website.
2. CRA scam emails: the suspicious email
You received $458.00 (CAD) from Canada Revenue Agency
Deposit your money
Expires: July 28
Emails like this are classic phishing scams.
Scammers send emails designed to look official, often including government logos or formatting similar to real CRA communications. The goal is to trick you into clicking a link and entering personal information.
These messages often:
- Claim you have a refund waiting
- Ask for payment immediately
- Create urgency with subject lines like “IMMEDIATE ACTION REQUIRED”
The CRA does send emails, but only in one very specific case: to notify you that there is a message waiting in your secure CRA account.
Here’s how to spot a fake CRA email:
Check the sender’s email address. It may say “Canada Revenue Agency,” but the actual email address often looks random or unrelated.
CRA notification emails usually appear as coming from:
Canada Revenue Agency / Agence du revenu du Canada
Also remember:
- The CRA will not include sensitive personal information in an email
- The CRA will not ask you to click a link to submit payment
- The CRA will not request payment through gift cards or crypto
If in doubt, don’t click the link. Instead, log in directly to your CRA My Account.
View sample fraudulent emails on the Canadian Revenue website.
3. CRA text message scams
“You have received $493 from the Canada Revenue Agency. Please fill in the following online form.”
Text message scams have become increasingly common in recent years.
These messages may claim you’re owed a tax refund or benefit payment and include a link to a fake website designed to steal your information.
If you receive a message like this claiming to be from the CRA, it is almost certainly fake.
The CRA does not communicate through text messages, WhatsApp, Facebook Messenger or other social media platforms.
Legitimate CRA communication happens through:
- CRA My Account
- Official Government of Canada mail
- Phone calls from CRA agents
If you receive a CRA message via text or social media, you can safely ignore it.
View sample fraudulent text messages on the Canadian Revenue website.
4. CRA mail fraud
Some scams involve sending letters or notices that appear to be from the CRA, demanding payments or personal information.
Does the CRA still send physical mail? Yes. Are there occasional mail scams? Sadly, also, yes. Like the other methods in our article, there are a few ways to discern real CRA mail from fake:
- The CRA will never ask to meet in person or for immediate payment to an individual.
- Look for a contact number, email address or other markers on the mail that indicate where to contact a CRA representative. If those are there, run a quick Google search of the number or contact email to confirm that it is the CRA, and then call to get more details before complying with any requests in the letter.
View sample fraudulent letters on the Canadian Revenue website.
5. CRA fake refund scams
Another common tactic is the “refund scam.”
A scammer contacts you claiming you are eligible for a tax refund. They’ll ask you to provide personal details or banking information so they can “deposit” the refund.
Instead of receiving money, your information may be used for identity theft or financial fraud.
If you are expecting a refund, always check directly through your CRA account rather than clicking on a link or sharing your information.
View sample fraudulent online refund forms on the Canadian Revenue website.
Fraud can happen to anyone
While some scams may seem obvious, they continue to fool thousands of Canadians every year.
Fraudsters are constantly adapting their tactics — including spoofed phone numbers, fake websites, and even AI-generated voices that imitate government officials.
Even tech-savvy people can be caught off guard.
That’s why it’s important to stay cautious, protect your personal information, and talk to family members (especially older relatives) about the risks.
A quick conversation can prevent a costly mistake.
How to protect yourself from CRA scams
Here are a few simple ways to protect yourself:
- Verify the identity of anyone claiming to be from the CRA by contacting them through official channels
- Avoid clicking on links in unsolicited emails or messages
- Never send money through gift cards or cryptocurrency for tax payments
- Keep your antivirus and anti-malware software up to date
- Use strong passwords and enable two-factor authentication where possible
What should you do if you have been scammed?
If you think you may have been the victim of a scam or fraud, contact:
- Your local police service
- Your financial institution
- Credit reporting agencies
You should also contact the CRA if you:
- Think your CRA user ID or password has been compromised
- Notice changes to your banking or personal information in CRA My Account
- See a benefit application submitted in your name without your knowledge
- Want to disable or restore access to your CRA online account
Taking action quickly can help limit the damage.
Need help navigating taxes?
Tax season doesn’t have to be stressful.
Book a free consult with one of the True North team members to learn how we can help small business owners like you take the fear out of tax time.
Contact us today to get started.
Read more about Personal Tax topics that may be helpful to you and your small business.
