How to Protect Your CRA Account
Online tax fraud is on the rise, and scammers are finding new ways to trick Canadians every year. Protect your CRA account and identity by following these essential steps:
- Monitor your CRA account regularly for unauthorized activity such as address changes or returns you didn’t file.
- Use strong, unique passwords and update them frequently — never reuse passwords across multiple accounts.
- Keep your contact details current so the CRA can reach you if something looks suspicious.
- Always sign out after using your CRA My Account.
- Enable multi-factor authentication (MFA) for an added layer of protection.
At MiAccounting, all digital communications are encrypted and protected with MFA and secure cloud storage through Google Workspace. Only authorized team members have access to your data, ensuring complete confidentiality and compliance with Canadian privacy laws.
What Legitimate Tax Preparers Will Do
Working with a professional accountant should give you peace of mind — not worry. A legitimate tax preparer will always:
- Communicate directly with you using verified, secure channels.
- Confirm your identity using government-issued photo ID or pre-set security questions.
- Use encrypted systems and multi-factor authentication to exchange tax documents safely.
💡 Fun Fact: Don’t be offended if your accountant asks for ID, even if you’ve been their client for years. It’s not a lack of trust; it’s a security best practice recommended by the CRA to protect both you and your preparer.
At MiAccounting, we make security part of our culture. Every client portal, e-signature, and file transfer meets CRA and PIPEDA compliance standards.
Common CRA Scams to Watch Out For
Scammers impersonate CRA agents, tax professionals, and government officials. Here are the most common tactics to watch out for:
- Fake payment notifications: Texts or emails using the Government of Canada logo that claim to send you an Interac e-Transfer.
- Messages with personal information: Scammers include your name, SIN, or birth date to look legitimate, then request payment or links.
- Fake GST/HST refunds: Promises of a refund in exchange for personal details.
- Account error alerts: Messages warning about “issues with your CRA account” and asking you to text “HELP.”
- Identity theft: Fraudsters filing fake returns using stolen information.
- “Click here to claim your CRA refund” links: These lead to fake banking sites designed to steal your login credentials.
- Urgent CRA debt calls: Scammers pretending to be CRA officers demanding payment via cash, cryptocurrency, or gift cards.
Red Flags to Watch For
If you receive a message that checks any of these boxes — it’s a scam:
- Creates urgency or threatens fines or arrest
- Asks for personal details by text or email
- Requests payment via gift card, e-transfer, or wire
- Includes spelling errors, fake phone numbers, or unofficial email addresses
🚫 Remember: The CRA never sends text messages. Legitimate CRA emails will never include clickable links — they’ll only notify you to log in directly through Canada.ca/my-cra-account.
What To Do If You Suspect Fraud
- Do not reply or click any links.
- Verify independently by logging in directly to your CRA account or calling the CRA.
- Report suspicious messages to phishing@cra-arc.gc.ca.
- Monitor your accounts for unauthorized activity.
If you’re unsure, reach out to MiAccounting — our experts can help you verify any CRA communication before you act on it.
MiAccounting’s Commitment to Client Security
At MiAccounting, your security is our top priority.
We use industry-grade encryption, VPN access, secure portals, and MFA authentication for all staff logins. Our systems are compliant with PIPEDA, and all client data is securely hosted on Canadian servers.
We don’t just help you file taxes — we help you protect your financial identity.
Our clients trust us because we combine expert tax knowledge with secure technology. From encrypted e-signatures to cloud-based bookkeeping, every step of your engagement with us is designed for safety, accuracy, and peace of mind.
Stay Smart. Stay Secure. Contact MiAccounting.
When in doubt, don’t click — contact us first.
Our accounting and cybersecurity-trained professionals will review suspicious communications, verify authenticity, and help you stay protected while filing your taxes with confidence.
📞 Call us today at (647) 727-9684 or email admin@miaccounting.ca
💻 Visit www.miaccounting.ca to learn more about our secure tax filing and bookkeeping services.
MiAccounting, where your finances and your data are in safe hands.
