10/07/2026
🚨 CRA SCAM EMAILS — HOW TO SPOT THEM! 🚨
Scammers can make an email look like it’s from the Canada Revenue Agency (CRA). Before clicking anything, take a moment to check these 3 things:
1️⃣ Check the “From” email address
Don’t rely on the sender name. Even if it says Canada Revenue Agency / Agence du revenu du Canada, check the actual email address.
📧 CRA emails related to your personal tax account will generally come from: [email protected]
Official CRA emails will use the cra-arc.gc.ca domain.
2️⃣ Check the subject line
CRA keeps email subject lines very generic for security and privacy reasons.
You may see something like:
“New mail from the Canada Revenue Agency / Nouveau courrier de l’Agence du revenu du Canada”
🇨🇦 Legitimate CRA notifications are generally provided in English and French.
3️⃣ Check the email itself
A legitimate CRA notification will:
✅ Use your full name — not your email address ✅ Tell you that you have new mail available online ✅ Keep the details general ✅ Direct you to sign in to CRA My Account
🚫 It will not provide detailed tax information in the email. 🚫 It will not ask you to click a login link or button. 🚫 It will not ask you to download a document.
🔐 When in doubt, don’t click!
If you receive an email claiming to be from the CRA, go directly to the CRA website and sign in to My Account yourself instead of using a link in the email.
⚠️ A little caution can help protect your personal and financial information.
📢 Share this post to help your family and friends recognize CRA phishing emails! :::