Scams and fraud - CRA - Keep your CRA account secure
You may be looking for:
There are many things you can do to help protect your Canada Revenue Agency (CRA) account from potential identity theft or fraud.
On this page
- Monitor your account regularly
- Change your passwords regularly
- Keep your contact information up to date
- Set up a Personal Identification Number (PIN)
- Authorize a representative
- Verify corporate registry information
Monitor your account regularly
You should monitor your CRA account and information regularly for suspicious activity.
Some things to look out for:
- Unexpected changes made to your information, including:
- Mailing address
- Banking or direct deposit details
- Authorized representatives
- Benefit applications made without your consent
You can check your tax account balances, benefit payment details, or get general tax information using one of the following options:
If you notice any unauthorized changes, report it to the CRA.
Receive email notifications from the CRA
Sign up to receive email notifications from the CRA. Make sure we have your current email address since it will be used to send email notifications about changes to your CRA account.
Change your passwords regularly
Your passwords, security questions, and answers should be changed on a regular basis.
Do not share user IDs and passwords with anyone else.
Use unique and strong passwords
For added security, never use the same password for your various online accounts. For example, use different passwords for your CRA account and your online banking accounts.
Make sure your passwords are complex and difficult for others to guess.
Keep your contact information up to date
If the CRA notices any suspicious activity on your account, they may need to contact you. Make sure your contact details are up to date, including your:
- Mailing address
- Phone numbers
- Email address
For details: Update your information with the CRA
Set up a Personal Identification Number (PIN)
The PIN can be used for certain services and provides added security to identify yourself when you call the CRA.
When creating your PIN:
- Make it easy to remember and hard for others to guess
- Avoid using personal information such as your date of birth or mailing address
- Always keep this information secure and do not share it with anyone
For details: Use a PIN when you call us
Authorize a representative
You can authorize another person, such as a friend, family member, or an accountant to represent you for your tax matters. This person must be registered for Represent a Client before you can give them access to your online tax information.
Once authorized, they can sign in to access your online information using Represent a Client.
For details: Representative authorization
Verify corporate registry information
If you have a business, make sure the list of directors and their contact information are up to date on applicable federal, provincial or territorial corporate registries.
The Canada's Business Registries search service is available to help you find information on businesses in Canada.
The CRA must have up to date information on any changes of owners, officers, or administrators.
For details: Change of owners, partners or directors