Ah, tax season. That magical time of year when we all gather around our computers, open our financial statements, and try not to cry. But while you’re busy figuring out if you can claim your dog as a dependent (spoiler: you can’t), there’s someone else lurking in the shadows—scammers.

Yes, that friendly voice on the other end of the phone claiming to be from the Canada Revenue Agency (CRA) probably isn’t someone you want to swap tax tips with. In fact, the CRA will never call, email, or text you asking for personal information or monetary payment. So, let’s make sure you stay safe this tax season by breaking down some of the most common scams and how to outwit them.

The Scam is Evolving (But So Can You)

No one wakes up thinking, “Today, I’m going to get scammed out of my hard-earned money.” But over the last seven years, more than 60,000 Canadians have reported fraudulent CRA calls. And that’s just the people who caught on! These scams have cost victims millions of dollars, and the scammers’ tricks are as varied as a buffet at a Vegas casino (minus the shrimp cocktail). We’re talking phishing emails, direct deposit scams, tax preparer fraud, and even—wait for it—good old-fashioned letters in the mail.

These fraudsters know tax season is stressful, and they’re banking on you making a mistake. But don’t worry—you’ve got this. Let’s look at some of the most common traps and how you can avoid falling into them.

Here’s What to Watch Out For

1. Phone Calls from the "CRA"

Ah, the classic CRA phone call scam. It’s like the spam call’s sophisticated cousin. The tricky part is that the CRA does sometimes call Canadians, so ?

Here’s what the CRA might actually do in a phone call:

• Ask you to verify some personal information (like your address or Social Insurance Number) to validate your identity.
• Call to discuss payment or set up a payment plan.
• Ask for financial info to determine your ability to pay any outstanding amounts.
• Request payment for a tax debt through one of their legit payment options.
• Send you legal warning letters if you’ve ignored their attempts to contact you.
• Take legal action to recover money if you’re doing your best "Catch Me If You Can" impression and dodging your taxes.

But here’s what the CRA will never do:

• Ask for your passport, health card, or driver’s license information. (Because why would they care if you can drive a car?)
• Threaten you with arrest, deportation, or a surprise visit from the police.
• Demand immediate payment (like, right now).
• Ask for payment via prepaid credit cards, gift cards, Bitcoin, or any other cryptocurrency—nope, not even Dogecoin.
• Collect or distribute payments through Interac e-transfer.

If someone on the phone is doing any of these sketchy things, hang up faster than you can say, "tax evasion." Then, report the call to the Canadian Anti-Fraud Centre. If you’re genuinely concerned it might have been the CRA, don’t panic—log in to your CRA account online or call them directly at 1-800-959-8281.

2. Text Messages from the "CRA"

The next frontier for scammers? Text messages. You’ll get a message claiming the CRA has a refund waiting for you, or that your Notice of Assessment is ready, and all you need to do is click this handy little link. Easy, right? Too easy.

Here’s the thing: the CRA will never text you about your tax return or ask for personal information via text, WhatsApp, Facebook Messenger, or any other instant messaging platform. The only legitimate CRA-related text you’ll get is a one-time passcode when you sign in to your CRA account (because, you know, security).

So, if you get a text from the "CRA" asking for anything, hit delete and move on with your day.

3. General Phishing Emails

Not all phishing emails are targeted. Sometimes, scammers just cast a wide net, hoping someone—anyone—will bite. These mass emails often ask you to click a link, download an attachment, or—surprise, surprise—give up personal information. They’re designed to look legit, complete with CRA logos and official-sounding jargon.

Pro tip: Watch out for unsolicited emails, especially ones that try to create a sense of urgency. If it looks suspicious, it probably is. And if you’re unsure, you can always check your CRA account directly rather than trusting an email that smells like fish.

4. Online Tax Preparer Fraud

Most tax preparers are good eggs. But occasionally, a bad apple sneaks in. Some shady tax preparers might file fraudulent returns on your behalf, pocketing your refund or, worse, stealing your identity.

Even if your tax preparer is legit, they could be the victim of cybercrime themselves, leading to your data getting compromised. Always keep an eye on your bank account for unexpected refunds or transactions. If you get a refund that feels like it came out of nowhere, call the CRA immediately. And if you get a call from a collection agency that seems off, don’t share your info—hang up and check your CRA account online or call them directly at 1-800-959-8281.

How to Stay Safe: Tax Season Survival Tips

1. Keep Your Software and Devices Updated

Make sure your computer, phone, and tablet are all running the latest security patches. Scammers love outdated software—it’s like leaving your front door wide open with a neon "Welcome" sign. Keep your antivirus software updated, too.

2. When in Doubt, Throw It Out

If an email or text looks even slightly fishy, delete it. Even if it seems legit, it’s better to play it safe. You can always validate the message by contacting the sender through a different channel.

3. Think Before You Act

Scammers thrive on urgency. If you get a message demanding immediate action—especially if it claims you owe money to the CRA—take a breath and double-check. You can always log into your CRA account to verify if you owe anything.

4. Use Strong Passwords

Your password shouldn’t be "password123," or anything equally embarrassing. Choose a password that’s at least 8-10 characters long and includes a mix of numbers, special characters, and upper and lowercase letters. And for goodness’ sake, use a password manager if you’re still keeping track of passwords in a notebook somewhere.

5. Watch Out for Public WiFi

Public WiFi is like a party where you didn’t invite half the people—anyone can jump in and snoop on your internet traffic. Avoid filing taxes or accessing sensitive info on a public network unless you’re using a secure connection (and maybe reconsider the whole "doing taxes at Starbucks" thing).

6. File Taxes from a Secure Website

Before you hit "submit" on your tax return, make sure the website you’re using begins with https (the "s" stands for secure). If it’s just http, close that tab faster than you close your door on Halloween when you’ve run out of candy.

Remember, the CRA Will Never:

• Use threatening or abusive language.
• Email you asking for personal or financial information.
• Call and demand immediate payment.
• Send you documents or forms unless you specifically requested them.

The only exception is if you call them and ask for something. Then, yes, they might email you the form. But that’s because you asked, not because they’re coming after you with an arrest warrant.

Don’t Be a Victim

Scammers evolve. They’re like the chameleons of the crime world—always adapting, always learning. But you can stay one step ahead by being vigilant and skeptical. Tax fraud might spike during tax season, but cybercrime is a year-round sport for these folks. Stay alert, follow the steps outlined here, and protect yourself from fraud and identity theft. You’ve got this.

For more information on how to stay safe, visit the or the .