Scams and fraud - CRA

Scams and fraud - CRA - Protect your CRA accounts

You may be looking for:

• Report a scam or identity theft
• How the CRA secures compromised accounts

There are many things you can do to help protect your Canada Revenue Agency (CRA) online accounts from potential identity theft or fraud.

On this page

• Monitor your accounts regularly
• Change your passwords regularly
• Keep your contact information up to date
• Set up a Personal Identification Number (PIN)
• Authorize a representative
• Verify corporate registry information

Monitor your accounts regularly

You should monitor your CRA online accounts and information regularly for suspicious activity.

Some things to look out for:

• Any signs of unusual behavior in your CRA accounts (My Account, My Business Account, or Represent a Client)
• Unexpected changes made to your information, including:
  • Mailing address
  • Banking or direct deposit details
  • Authorized representatives
• Benefit applications made without your consent

You can check your tax account balances, benefit payment details, or get general tax information using one of following options:

• Signing in to CRA online accounts
• Calling the automated Tax Information Phone Service (TIPS)

If you notice any unauthorized changes, report it to the CRA.

Receive email notifications from the CRA

Sign up to receive email notifications from the CRA. Make sure we have your current email address since it will be used to send email notifications about changes to your CRA online accounts.

Change your passwords regularly

Your passwords, security questions, and answers should be changed on a regular basis.

Do not share user IDs and passwords with anyone else.

Use unique and strong passwords

For added security, never use the same password for your various online accounts. For example, use different passwords for your CRA accounts and your online banking accounts.

Make sure your passwords are complex and difficult for others to guess.

Keep your contact information up to date

If the CRA notices any suspicious activity on your account, they may need to contact you. Make sure your contact details are up to date, including your:

• Mailing address
• Phone numbers
• Email address

For details: Update your CRA information

Set up a Personal Identification Number (PIN)

The PIN can be used for certain services and provides added security to identify yourself when you call the CRA.

When creating your PIN:

• Make it easy to remember and hard for others to guess
• Avoid using personal information such as your date of birth or mailing address
• Always keep this information secure and do not share it with anyone

For details: Use a PIN when you call us

Authorize a representative

You can authorize another person, such as a friend, family member, or an accountant to represent you for your tax matters. This person must be registered for Represent a Client before you can give them access to your online tax information.

Once authorized, they can sign in to access your online information using Represent a Client.

For details: Authorize a representative

Verify corporate registry information

Make sure the list of directors and their contact information are up to date on applicable federal, provincial or territorial corporate registries.