My CRA account was hacked
If someone has gotten into your CRA My Account, the priority is to have the CRA lock it down. An agent can place protections on the account once you report. Then work outward to your bank and the credit bureaus.
Never send “recovery money”
After a scam, fraudsters often come back, posing as police, a lawyer, a government agent, or a “recovery agency”, and offer to recover your losses for an upfront fee. That is a second scam. No legitimate agency, and no police service, charges an upfront fee to recover stolen money. If someone contacts you promising to get funds returned for a payment, it is fraud.
The order to work in
- 1Report to the CRA: through the online form, or call the personal fraud line. An agent will place protections on your account shortly after.
- 2Contact your bank or financial institution, especially if direct-deposit details may have changed.
- 3Place a fraud alert with both credit bureaus, Equifax and TransUnion.
- 4Report to your local police and get the file number.
- 5Report to the Canadian Anti-Fraud Centre.
CRA contact numbers
- Personal (compromised account): 1-833-995-2336, Monday to Friday, 6:30 am to 7 pm ET
- Business: 1-800-959-5525
- Automated line (24/7): 1-800-265-2577
Common questions
How do I report that my CRA account was compromised?
Report it through the CRA’s online form, or call the personal fraud line at 1-833-995-2336 (Monday to Friday, 6:30 am to 7 pm ET). An agent will place protections on your account shortly after you report.
What happens after I report it?
The CRA restricts access while it reviews the account. From there, treat it like any identity exposure: contact your bank, place fraud alerts with both credit bureaus, report to your local police for a file number, and report to the Canadian Anti-Fraud Centre.
Are there other CRA numbers?
Yes. Business enquiries are handled at 1-800-959-5525, and there is an automated line at 1-800-265-2577. For a compromised personal account, the personal line above is the one to use.
Official sources
Where to go from here
General information only, not legal advice and not a recovery service. Full disclaimer. Facts checked October 2026.