CRA Scam Canada: Fake Canada Revenue Agency Calls and Texts Explained
This article was originally published on WarnScams. The call that ruins an afternoon The phone rang at 4:40 on a Tuesday afternoon, and the caller ID said something that made Gurpreet's stomach drop: "CRA â C
This article was originally published on WarnScams.
The call that ruins an afternoon
The phone rang at 4:40 on a Tuesday afternoon, and the caller ID said something that made Gurpreet's stomach drop: "CRA â CANADA REVENUE." She picked up. A man with a rehearsed, official-sounding voice introduced himself as "Officer Daniel Wright, badge number 4521, Canada Revenue Agency Collections." He said a warrant had been issued for her arrest because she owed $3,847 in unpaid taxes, and a police car could be at her house within the hour â unless she settled the debt right now, on this call, by reading him the codes from gift cards she would buy at the drugstore down the street. She was told to stay on the line the whole time and not to tell anyone, because it was a "confidential tax matter."
Gurpreet is not unusual. Every tax season â and all year round â thousands of Canadians get a version of this call. The details change. The threat doesn't. That voice on the line is not a CRA collections officer. It is a criminal running a scam that Canadian police services and the Canadian Anti-Fraud Centre have warned the public about for years, and it keeps working because it weaponizes the one thing people fear more than paperwork: the government coming for them.
There is also a quieter sibling to the scary phone call: the fake CRA text. "CRA: You have an unclaimed tax refund of $486.20. Claim here." One tap opens a page dressed up like a government login, and whatever you type in â your SIN, your banking password â goes straight to criminals. Both versions, the threats and the "refunds," come from the same playbook.
The short answer
A call or text demanding immediate payment to the CRA â by gift cards, cryptocurrency, e-transfer, or prepaid cards â or threatening arrest is not from the Canada Revenue Agency. The real CRA never demands payment this way and never threatens you with jail or police. Hang up, check your account by signing in at canada.ca yourself, and report the attempt to the Canadian Anti-Fraud Centre.
How the scam works, step by step
1. The hook. You get a call â often from a spoofed number that says "CRA" or shows an Ottawa area code â or a text about a refund. Robocalls are common for the first touch, because a machine can dial ten thousand numbers a day and only connect the worried people who press 1.
2. The authority performance. A live caller takes over. Badge numbers, case file numbers, and full-name introductions are all theater designed to sound like bureaucracy. Some scammers will even read back part of your address â bought from a data leak â to prove they're "really from the agency." They're not.
3. The threat. This is the engine of the whole scam. You owe back taxes. A warrant has been issued. The police are coming. Your accounts will be frozen. Your passport will be revoked. The urgency is deliberate â a person who is told they have 45 minutes does not have time to think, google, or call their accountant. Fear shuts down the part of your brain that asks questions.
4. The payment â and it is always weird. Real tax agencies accept boring payments: cheques, direct deposit, online banking transfers through your own bank. The scammer cannot accept those because they would be traced. So they demand payment methods that are fast and irreversible: gift cards, Bitcoin or other cryptocurrency, Interac e-transfers to a random email, or prepaid credit cards. Once you read out a gift card code, that money is gone in minutes.
5. The lock-in. Victims are told to stay on the phone while they buy the cards and to tell the cashier the cards are "a gift for my grandson" if asked. That instruction exists for one reason: store cashiers are trained to warn people who look like fraud victims, and the scammer knows it.
The scam doesn't work because victims are careless. It works because it's a rehearsed psychological operation, run by organized groups, often from call centers abroad, dialing Canadians in bulk.
Scammer claims vs. what the CRA really does
| What the scammer claims | What the real CRA actually does |
|---|---|
| Demands payment by gift cards, Bitcoin, e-transfer, or prepaid cards | Accepts payments through established channels: online banking, pre-authorized debit, cheque, or CRA My Payment. It never asks for gift cards or crypto. |
| Threatens immediate arrest, police at your door, or jail | Never threatens arrest, never sends police, and never uses threatening or abusive language. |
| Leaves threatening voicemails with personal or financial details | Never leaves voicemails containing threats or your personal financial information. |
| Sends texts or WhatsApp messages about refunds or debts | Does not send texts about refunds or debts. The only texts it sends are sign-in verification codes for people who chose the phone option for multi-factor authentication. |
| Sends emails with a login link asking for your SIN or banking info | Real CRA emails never include a link asking you to provide personal or financial information. Legitimate web addresses start with canada.ca or end in cra-arc.gc.ca. |
| Demands payment on the spot and refuses to put anything in writing | A real collections contact follows a written notice, and you are free to verify the caller's identity before doing anything. |
| Charges a "fee" to speak with an agent or process your file | Never charges a fee to speak with a call centre agent. |
In October 2026 the CRA had to issue a fresh warning about yet another variant â messages claiming your tax return contains errors and urging you to download a "revised notice of assessment" from a link. Same playbook, new costume.
Red flags worth memorizing
- Threats of arrest, deportation, or police action. No Canadian tax agency threatens people with jail over the phone. Ever.
- Payment by gift cards, cryptocurrency, e-transfer, or prepaid cards. A tax agency demanding iTunes cards is not a tax agency. The method of payment is the confession.
- Artificial urgency. "You have 45 minutes." "The police are leaving the station now." Real bureaucracy moves slowly and puts things in writing.
- Spoofed caller ID. The display says "CRA" or an Ottawa number. Caller ID can be faked in seconds â the Canadian Anti-Fraud Centre warns explicitly not to trust it.
- Texts or instant messages about money. A CRA text with a refund link or a WhatsApp message about your tax file is not real. The CRA does not communicate about money this way.
- Refusal to let you verify. Ask for the caller's name, employee number, and a callback number, and tell them you'll hang up and call the CRA yourself. A real employee accepts that. A scammer will threaten you harder, insult you, or hang up.
- Secrecy instructions. "Don't tell anyone, this is confidential." That order exists to keep you away from the one person â a family member, a friend, a cashier â who would tell you it's a scam.
How to verify a real CRA contact
- Hang up first. Do not verify someone's identity while they're on the line pressuring you. Real callers will not punish you for hanging up and calling back.
- Sign in to CRA My Account yourself. Type canada.ca into your browser â never use a link from the message â and check for any balance owing, notices, or letters. If the "urgent debt" doesn't appear there, it doesn't exist.
- Call the CRA on a number you looked up yourself. For individual tax questions, the published number is 1-800-959-8281. Never call the number the suspicious caller gave you.
- Check the email or web domain. Real CRA emails come from addresses ending in @cra-arc.gc.ca or @canada.ca, and they will not contain a link asking for personal information. Hover over links (don't click) to see the real destination.
- Apply the payment test. Whatever the caller claims, ask yourself: are they asking for gift cards, crypto, or e-transfer? If yes, it's a scam.
If you already paid or shared information
Don't sit in shame â move fast. Speed genuinely limits the damage.
- If you bought gift cards and read out the codes, contact the gift card issuer's fraud line immediately. If the cards haven't been drained yet, some issuers can freeze the balance.
- If you sent an e-transfer or crypto, call your bank or exchange right away. E-transfers can sometimes be reversed if they haven't been deposited. Crypto almost certainly cannot be â still report it, because the wallet address becomes evidence.
- If you gave your SIN, report it to Service Canada, put fraud alerts on your credit files with both Equifax and TransUnion, and watch your credit reports.
- If you entered banking credentials on a fake site, change those passwords immediately from a clean device, turn on two-factor authentication, and tell your bank.
- If you let a caller install remote-access software, disconnect from the internet, uninstall the software, and have the device checked.
How to report a CRA scam
Reporting takes about ten minutes, and it's the single most useful thing you can do after hanging up:
- Report to the Canadian Anti-Fraud Centre online at antifraudcentre-centreantifraude.ca or by phone at 1-888-495-8501. Report even if no money changed hands â attempts count.
- If you lost money, also file a report with your local police. Bring screenshots, phone numbers, and gift card receipts.
- Forward scam texts to 7726 (SPAM) from your phone.
- Report phishing emails through the federal government's cybercrime and fraud reporting system rather than just deleting them.
- For cross-border context, the FTC takes reports at ReportFraud.ftc.gov and the FBI's Internet Crime Complaint Center at ic3.gov.
Read the full guide on WarnScams: CRA Scam Canada: Fake Canada Revenue Agency Calls and Texts Explained
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes â full credit and traffic to the original publisher.