No, a CRA text message about a tax refund that includes a link is almost always a scam. The Canada Revenue Agency (CRA) does not send refunds by Interac e-Transfer, does not text links asking you to log in, and does not demand payment by gift card, cryptocurrency, or wire transfer. Real CRA refunds arrive by direct deposit or a mailed cheque, and any legitimate CRA correspondence is available inside your CRA My Account portal. If a text, email, or call pressures you to click, verify identity, or pay right now, treat it as fraud, do not click, and report it to the Canadian Anti-Fraud Centre at 1-888-495-8501.
» The CRA Text on Your Phone Right Now
You are standing in a checkout line when your phone buzzes. The message says the Canada Revenue Agency owes you a refund, and a link is waiting to release the funds by Interac e-Transfer if you verify your identity right now. The refund amount looks plausible. You almost tap.
This is exactly what fraudsters count on. The Canadian Anti-Fraud Centre reports that Canadians lost more than 704 million dollars to fraud in 2025, and CRA impersonation has been the largest single category of government-fraud reports for several years running. Refund-text scams work because they hit real anxiety about tax season, mimic official branding, and demand a decision in seconds.
The rest of this guide gives you a plain-English way to tell what is real, what to do next, and how to recover if you already clicked.
Reported Fraud Losses in Canada, 2021 to 2025
Total losses reported to the Canadian Anti-Fraud Centre have climbed every year, with 2025 crossing $704 million. Most fraud goes unreported, so actual losses are higher.
» Quick Start: Pick Your Path
Log in to CRA My Account through canada.ca directly. Any real refund appears under Accounts and payments.
Check both CRA My Account and CRA My Business Account. Scammers often target the business side because refunds there can be larger.
Treat any staff-received text as a workforce alert. Ask your bookkeeper to walk through CRA My Business Account with the team.
You likely have both personal and corporate CRA files. Verify each portal separately before assuming a message ties to only one.
» What a Real CRA Message Looks Like vs. a Scam
The CRA does use a mix of channels, including phone, email, mail, and text in specific cases, but its rules of engagement are narrow and consistent. Scam messages break at least one of those rules almost every time. If a message asks you to act on the message itself rather than routing you back to an official portal, that is your first signal.
The table below compares the two side by side. Use it as a quick reference the next time something suspicious lands.
| Channel | Real CRA | Scam |
|---|---|---|
| Text message | Rare, no links, no refund amount, no urgency | Refund amount, urgent link, e-Transfer language |
| Short notification that a message is waiting in My Account | Government wordmark, refund button, PDF attachment | |
| Phone call | Discusses balances but never demands crypto, gift cards, or arrest | Aggressive tone, threats of police, payment by unusual method |
| Refund method | Direct deposit or mailed cheque only | Interac e-Transfer, wire transfer, gift card, cryptocurrency |
If a legitimate refund really is delayed, the reason is usually administrative. Our guide on why a CRA refund is delayed covers the common causes.
How Scammers Impersonate the CRA, by Channel
Text-message and email phishing now dominate CRA-impersonation attempts, with voice calls a distant third. Illustrative distribution based on CAFC and CRA public reporting.
» Step-by-Step: What To Do When a Suspicious CRA Message Arrives
- 1Do not click, reply, or press a keypad option.Every action, including replying STOP, confirms your number is active and often leads to more messages. Leave the message on your screen and take a breath.
- 2Screenshot the message.Capture the sender number or email address, the exact wording, and any links. You will need this if you file a report or hand the file to your accountant later.
- 3Verify inside CRA My Account, not through the message.Open a fresh browser, type canada.ca yourself, and sign in to My Account or My Business Account. Any real refund, balance, or notice will appear there. If nothing appears, the message was almost certainly a scam. Our note on CRA My Account warning signs lists what to check inside the portal.
- 4Cross-check any phone number.If the message includes a number to call, do not use it. Look up the CRA number directly on canada.ca. The general enquiry line is 1-800-959-8281 and the business enquiry line is 1-800-959-5525.
- 5Report the scam.Forward suspicious texts to 7726 (SPAM) on your carrier, forward emails to phishing at cra-arc.gc.ca, and file a report with the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre-centreantifraude.ca. Reporting is the single most effective way to help CAFC and the RCMP track patterns.
- 6Delete and block.After the report is filed, delete the message and block the sender. If you use a business number, notify your team so nobody else engages with the same thread.
» What To Do If You Already Clicked the Link
Hour 0 to 1. Disconnect from Wi-Fi if you entered anything on the linked page. Change your CRA sign-in credentials and your email password from a different device. Take a screenshot of the URL and the message.
Hour 1 to 6. Call the CRA on the number listed above and ask them to place additional security on your account. Once inside My Account, check for any unauthorized changes to your direct deposit details, mailing address, marital status, or authorized representatives. Any of these can be signs your file has been touched.
Hour 6 to 24. Report to the Canadian Anti-Fraud Centre, place a fraud alert on your credit files, and notify your accountant. Our broader guide on how to fraud-proof your business covers longer-term protections.
First 24 Hours After Clicking a Fake CRA Link
A sequenced recovery playbook. The first hour matters most, but tasks within the first 24 hours cover the highest-impact protections.
» The 6 Most Common Mistakes Canadians Make With CRA Scam Texts
Most of the harm from CRA scam messages comes not from the text itself but from the reflex response. These are the six patterns we see most often when clients come to us after the fact. Our note on how to survive and avoid a CRA audit covers what happens if a compromised file triggers CRA follow-up.
- →Clicking the link just to see what it looks like. The credential-harvesting page loads and captures your data on the first tap.
- →Replying STOP or texting back a question. Any reply confirms your number is live and often escalates the volume of scam messages.
- →Forwarding the text to family without warning. A parent or new-Canadian relative may click before you can explain.
- →Deleting the message without reporting it. Without reports, the Canadian Anti-Fraud Centre cannot track the wave or warn other Canadians.
- →Trusting the sender name or caller ID. Scammers can spoof CRA phone numbers and display names easily.
- →Ignoring it after clicking. Silence lets the scammer change your direct-deposit information or file a fraudulent return before you notice.
» Frequently Asked Questions
Is the CRA text about my $428 tax refund real?
Does the CRA ever text me at all?
Will the CRA email me a link to claim my refund?
How do I check if I actually have a refund coming without clicking anything?
What should I do if I already clicked the link in a fake CRA text?
What happens if I gave a scammer my Social Insurance Number?
Can the CRA really arrest me or send police if I do not pay right now?
How do I report a CRA scam text or email in Canada?
When to Bring in a Canadian Tax Professional
If your CRA My Account was compromised, a fraudulent filing appeared under your name, or your Social Insurance Number was exposed and touches your business, the situation has moved past a five-minute fix. ClearWealth Accounting Advisors helps individuals and Ontario SMEs work through CRA disputes, voluntary disclosures, and taxpayer-relief requests. If you are unsure whether to escalate, book a consultation and we will help you decide the next step.
Book a ConsultationSources & References
- Scams and fraud — Canada Revenue Agency — https://www.canada.ca/en/revenue-agency/corporate/scams-fraud.html
- Businesses: Protect yourself from scams and fraud — Canada.ca — https://www.canada.ca/en/revenue-agency/news/newsroom/tax-tips/tax-tips-2022/businesses-protect-yourself-from-scams-and-fraud-know-what-to-expect-from-cra.html
- Canadian Anti-Fraud Centre — Report Fraud — https://antifraudcentre-centreantifraude.ca/index-eng.htm
- Fraud Prevention Month — Competition Bureau Canada — https://www.canada.ca/en/competition-bureau/news/2026/03/fraud-prevention-month-to-bring-hidden-crime-into-the-spotlight.html
- Protect yourself from scams and fraud — Service Canada — https://www.canada.ca/en/services/life-events/retirement/protect-yourself-scams-fraud.html
- Cancel or waive penalties or interest — CRA taxpayer relief — https://www.canada.ca/en/revenue-agency/services/about-canada-revenue-agency-cra/complaints-disputes/cancel-waive-penalties-interest.html
