A client of mine received an email last week saying that the CRA (Canada Revenue Agency) had a refund for him, so he should click on a link and submit some information. In turn, he forwarded the suspicious email to me for my “expert” opinion.
The first question the email cultivated in my mind was, “Doesn’t CRA already has all my information?” After all, they manage to deposit my measly little refund every May. But the email looked quite authentic with the CRA logo banner included from their website. Fortunately, I had come across a warning about this “phishing” scam some time ago.
The CRA does not do the following:
- The CRA will not request personal information of any kind from a taxpayer by email.
- The CRA will not divulge taxpayer information to another person unless formal authorization is provided by the taxpayer.
- The CRA will not leave any personal information on an answering machine.
- The CRA will not ask a taxpayer to call back to a long distance number. The number will either be local or toll-free.