CRA Scam Texts: What They Look Like and What to Do

The CRA does not text you about money

According to the CRA's own guidance, it does not send text messages or emails about benefits or tax credits that ask you to click a link. The only text message the real CRA will ever send is a one-time passcode, and only if you specifically signed up for multi-factor authentication by phone on your CRA account. That is the entire list. Any text about a debt, a refund, a benefit deposit, or a legal threat is not from the CRA.

What a CRA scam text usually says

These messages tend to follow one of a few scripts:

• A notice that you have an e-transfer or refund deposit waiting, with a link to “accept” it.
• A claim that you owe back taxes and must pay today to avoid legal action or arrest.
• A warning that your SIN or account has been suspended due to suspicious activity.
• A request to pay a balance using an e-transfer, cryptocurrency, or prepaid gift cards (iTunes, Google Play, Amazon, and similar).

The link usually leads to a page built to look like a bank login or a government portal. Entering anything there hands your information straight to the scammer.

Red flags to watch for

• Urgency — “today only,” “immediately,” or a threat of arrest.
• A request to pay by e-transfer, crypto, or gift card. The real CRA never asks for these.
• A link you are told to click right away to “resolve” something.
• Being told not to tell anyone, or to stay on the phone while you act.

What to do right now if you got one

1. Do not click any link in the text.
2. Do not reply, and do not call any number included in the message.
3. If you want to confirm your actual tax status, call the CRA directly at 1-800-959-8281 — a number you looked up yourself, not one from the text.
4. Report it to the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre-centreantifraude.ca, whether or not you lost money.
5. Delete the message, and block the number if your phone allows it.

If you already clicked a link or sent money

Contact your bank immediately if you entered any banking details or sent money. Report it to the Canadian Anti-Fraud Centre using the number or link above. If you shared a SIN or other identifying information, that is worth mentioning to your bank and to the CAFC as well. Acting quickly matters more than feeling embarrassed — scammers count on people staying quiet. For the full step-by-step, see our guide on what to do after money is sent.