Insight

Nov 26, 2025

Mackisen

Beware of Tax Scams: Spotting Fake CRA Communications – A Complete Guide by a Montreal CPA Firm Near You

Introduction

Tax scams targeting Canadians have increased dramatically in recent years. Fraudsters impersonate CRA through phone calls, emails, text messages, social media accounts, and even fake CRA websites. These scams typically claim you owe back taxes, demand immediate payment, threaten arrest, or request personal information. Many people panic and fall victim because scammers use fear, urgency, and false authority. Understanding how to identify fake CRA communications is essential to protecting yourself, your finances, and your identity. This guide explains what CRA will never do, what real CRA communication looks like, and how to protect yourself from fraud.

Legal and Regulatory Framework

Fraud involving impersonation of a federal agency is illegal under the Criminal Code of Canada. CRA itself is bound by strict confidentiality rules under the Income Tax Act, which prevents them from requesting sensitive information through insecure channels. CRA communicates through official accounts such as My Account, My Business Account, registered mail, and secure phone procedures. Any communication outside these channels requires careful verification. CRA also works with the RCMP, Canadian Anti-Fraud Centre, and international agencies to track and stop fraudulent schemes.

Key Court Decisions

In R. v. Felderhof, the courts affirmed strict penalties for fraudulent misrepresentation, reinforcing why CRA and law enforcement aggressively prosecute tax-related scams. In R. v. Potts, the court upheld prison sentences for individuals running GST/HST refund scams. In R. v. White, the court ruled that impersonation of CRA to extract money constituted criminal fraud. These cases illustrate the seriousness of tax-related fraud and the legal system’s strong stance against it.

Why Tax Scams Are So Dangerous

Scammers target taxpayers because CRA has legitimate authority to collect money, which makes fake demands believable. Many Canadians fear CRA audits, reassessments, and collections, so fraudsters exploit that fear. Victims may lose money, compromise SIN or banking information, expose personal data, or unintentionally give fraudsters access to CRA accounts. Once stolen, identities can be used to apply for benefits, file fake tax returns, or open fraudulent credit lines. Early detection is critical.

Common Signs of CRA Scams

1. Threats or Aggressive Language

CRA never threatens arrest, jail, or immigration action during the first contact.

2. Demands for Immediate Payment

Fraudsters demand payment through gift cards, cryptocurrency, prepaid cards, or e-transfers. CRA never uses these methods.

3. Unsolicited Calls or Texts

CRA does not communicate tax balances through generic text messages or WhatsApp.

4. Requests for Personal Information

CRA will never request your SIN, bank details, passport number, or credit card information through email, text, or phone without proper verification.

5. Email Links to Fake Websites

Scammers use phishing links designed to mimic CRA login pages to steal credentials.

6. Communication from Suspicious Numbers

Calls from spoofed numbers or foreign area codes are common red flags.

What Real CRA Communication Looks Like

CRA may contact you through My Account, My Business Account, secure email via notification only (never sending sensitive data), or by phone after verifying your identity properly. Legitimate CRA agents never pressure you, never demand immediate payment, and always explain the reason for their call. CRA only accepts payment through official channels like online banking, credit card via third-party providers, or mailed cheques.

Mackisen Strategy

At Mackisen CPA Montreal, we help clients distinguish legitimate CRA communication from scams. When clients receive suspicious contact, we verify the communication’s origin, review CRA account activity, contact CRA directly when necessary, and advise on how to respond safely. If identity theft occurs, we assist with securing CRA accounts, updating records, filing corrected returns, and reporting fraud to the proper authorities. Our guidance ensures financial protection and peace of mind.

Real Client Experience

A Montreal client received a threatening call demanding immediate payment by gift card. We confirmed it was a scam and prevented financial loss. Another client clicked a phishing link, compromising their CRA credentials; we helped secure the account and notify CRA fraud services. A business owner received fake GST/HST audit notices; we verified authenticity and educated the team on fraud detection. Several clients avoided financial and identity theft due to early consultation.

Common Questions

Does CRA ever call taxpayers? Yes, but not without proper identity verification and never with threats. Does CRA text people? Only to notify you that a message is available in your CRA account—not to request payment. What if I clicked a suspicious link? Change passwords immediately and contact CRA. Can CRA ask for SIN? Yes, but only after proper identity verification—not in unsolicited emails.

Why Mackisen

With more than 35 years of combined CPA experience, Mackisen CPA Montreal helps individuals and businesses protect themselves from CRA-related scams. We verify communications, guard your financial information, assist with identity theft recovery, and ensure you only respond to legitimate CRA requests.

All-in-One Accounting, Tax, Audit, Legal & Financing Solutions for Your Business

Are you ready to feel the difference?

Have questions or need expert accounting assistance? We're here to help.

Let’s Stay In Touch

Follow us on LinkedIn for updates, tips, and insights into the world of accounting.

Terms & conditionsPrivacy PolicyService PolicyCookie Policy

@ Copyright Mackisen Consultation Inc. 2010 – 2024. •  All Rights Reserved.

© 1990-2024. See Terms of Use for more information.

Mackisen refers to Mackisen Global Limited (“MGL”) and its global network of member firms and associated entities collectively constituting the “Mackisen organization.” MGL, alternatively known as “Mackisen Global,” operates as distinct and independent legal entities in conjunction with its member firms and related entities. These entities function autonomously, lacking the legal authority to obligate or bind each other in transactions with third parties. Each MGL member firm and its associated entity assumes exclusive legal accountability for its actions and oversights, explicitly disclaiming any responsibility or liability for other entities within the Mackisen Organization. It is of legal significance to underscore that MGL itself refrains from rendering services to clients.