Guidepost

Just been scammed?

My CRA account was hacked

If someone has gotten into your CRA My Account, the priority is to have the CRA lock it down — an agent can place protections on the account once you report. Then work outward to your bank and the credit bureaus.

Never send “recovery money”

After a scam, fraudsters often come back — posing as police, a lawyer, a government agent, or a “recovery agency” — and offer to recover your losses for an upfront fee. That is a second scam. No legitimate agency, and no police service, charges an upfront fee to recover stolen money. If someone contacts you promising to get funds returned for a payment, it is fraud.

The order to work in

  1. 1Report to the CRA — through the online form, or call the personal fraud line. An agent will place protections on your account shortly after.
  2. 2Contact your bank or financial institution, especially if direct-deposit details may have changed.
  3. 3Place a fraud alert with both credit bureaus, Equifax and TransUnion.
  4. 4Report to your local police and get the file number.
  5. 5Report to the Canadian Anti-Fraud Centre.

CRA contact numbers

  • Personal (compromised account): 1-833-995-2336 — Monday to Friday, 6:30 am to 7 pm ET
  • Business: 1-800-959-5525
  • Automated line (24/7): 1-800-265-2577

Common questions

How do I report that my CRA account was compromised?

Report it through the CRA’s online form, or call the personal fraud line at 1-833-995-2336 (Monday to Friday, 6:30 am to 7 pm ET). An agent will place protections on your account shortly after you report.

What happens after I report it?

The CRA restricts access while it reviews the account. From there, treat it like any identity exposure: contact your bank, place fraud alerts with both credit bureaus, report to your local police for a file number, and report to the Canadian Anti-Fraud Centre.

Are there other CRA numbers?

Yes. Business enquiries are handled at 1-800-959-5525, and there is an automated line at 1-800-265-2577. For a compromised personal account, the personal line above is the one to use.

General information only, not legal advice and not a recovery service. Full disclaimer. Last updated: July 2026.