Income tax scams targeting Canadians – and Americans – have already started

It’s time to start preparing your personal income tax return in Canada and the U.S. Just remember that crooks are preparing, too.

Researchers at Sophos said on Tuesday that they are seeing email messages to individuals pretending to be from the Canada Revenue Agency (CRA), claiming the person is entitled to a refund from the government. To collect, the individual is asked to create a CRA account. The message includes a link to a fake CRA website; the goal is to get personal information from victims.

There are several versions of the scam. One says recipients can sign up for an Interac e-transfer of funds.

Crooks hope victims will be fooled by the lure of money and copies of government logos. However, there are several clues messages like these are scams. In this scam

— neither the Canadian nor the American government will send a message that you are entitled to a refund;

— some messages are in fractured English. One, for example, asks recipients to deposit their money rather than withdraw it;

— smart people who hover their mouse over the link for signing into or creating an account will see it doesn’t go to a Government of Canada site. Often the link goes to a page created on Amazon Web Services (AWS).

— smart people who have enabled their email to show the sender’s full email address will see it obviously doesn’t come from the government. A hacker can make the sender’s name appear to be from any well-known agency, company or person. But the full email address will show the real sender.

There is a large number of tax scams aimed at American residents as well. These include phone, letter, or email messages claiming you owe taxes. They will demand that you pay the amount immediately, usually with a prepaid debit card or wire transfer. They may even threaten to arrest you if you don’t pay.

Click here for information from the U.S. Internal Revenue Service (IRS) about identifying tax fraudsters.

Click here for advice from the Canada Revenue Agency. See also this page for details on CRA scams.

Be suspicious of any email, text, or phone call from anyone asking for personal information including your birthdate, credit or debit card number, bank account number, or Social Insurance/Social Security number. Crooks will claim they need these numbers from you to verify information.

If you call a government agency on your own — not using a phone number in an email or text — using personal information for verification is safe.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times. I can be reached at hsolomon [@]

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now