Did you receive an email from the Canada Revenue Agency (CRA) asking you for personal information or to click on a link to get your refund?
STOP. It’s a "phishing" scam.
The CRA does not ask for personal information of any kind by email. Even though these emails can look real, they do not come from the CRA. They are "phishing" scams that contain special coding or downloadable forms that are designed to steal your personal or financial information.
What is phishing?
Phishing is an email scam to steal personal or financial information using official-looking emails that direct you to fake Web sites that look identical or similar to those of a legitimate business, bank, or government department. The fake Web site will then request personal or financial information.
Most phishing emails include false statements intended to create the impression that you have to do something right away.
If you receive these emails, close them right away and call the CRA at 1-800-959-8281 to report them.
When in doubt, ask yourself…
- Am I expecting money from the CRA?
- Am I confident I know who is asking for the information?
- Are they asking for information I know the CRA already has on file for me?
- How did they get my email address?
- Does this sound too good to be true?
More information
Informing yourself is your best protection against scams and fraudsters. Go to www.cra.gc.ca/fraudprevention or call us at 1-800-959-8281.
