Scams and fraud - CRA

Scams and fraud - CRA - Keep your CRA account secure

You may be looking for:

• Report a scam or identity theft
• How the CRA secures compromised accounts

There are many things you can do to help protect your Canada Revenue Agency (CRA) account from potential identity theft or fraud.

On this page

• Monitor your account regularly
• Change your passwords regularly
• Keep your contact information up to date
• Set up a Personal Identification Number (PIN)
• Authorize a representative
• Verify corporate registry information

Monitor your account regularly

You should monitor your CRA account and information regularly for suspicious activity.

Some things to look out for:

• Unexpected changes made to your information, including:
  • Mailing address
  • Banking or direct deposit details
  • Authorized representatives
• Benefit applications made without your consent

You can check your tax account balances, benefit payment details, or get general tax information using one of the following options:

• Sign in to CRA accounts
• Contact the CRA

If you notice any unauthorized changes, report it to the CRA.

Receive email notifications from the CRA

Sign up to receive email notifications from the CRA. Make sure we have your current email address since it will be used to send email notifications about changes to your CRA account.

Change your passwords regularly

Your passwords, security questions, and answers should be changed on a regular basis.

Do not share user IDs and passwords with anyone else.

Use unique and strong passwords

For added security, never use the same password for your various online accounts. For example, use different passwords for your CRA account and your online banking accounts.

Make sure your passwords are complex and difficult for others to guess.

Keep your contact information up to date

If the CRA notices any suspicious activity on your account, they may need to contact you. Make sure your contact details are up to date, including your:

• Mailing address
• Phone numbers
• Email address

For details: Update your information with the CRA

Set up a Personal Identification Number (PIN)

The PIN can be used for certain services and provides added security to identify yourself when you call the CRA.

When creating your PIN:

• Make it easy to remember and hard for others to guess
• Avoid using personal information such as your date of birth or mailing address
• Always keep this information secure and do not share it with anyone

For details: Use a PIN when you call us

Authorize a representative

You can authorize another person, such as a friend, family member, or an accountant to represent you for your tax matters. This person must be registered for Represent a Client before you can give them access to your online tax information.

Once authorized, they can sign in to access your online information using Represent a Client.

For details: Representative authorization

Verify corporate registry information

If you have a business, make sure the list of directors and their contact information are up to date on applicable federal, provincial or territorial corporate registries.

The Canada's Business Registries search service is available to help you find information on businesses in Canada.

The CRA must have up to date information on any changes of owners, officers, or administrators.

For details: Change of owners, partners or directors