In the recent CRA hacking incidents, hackers used passwords and usernames from previous hacks in other organizations to access CRA accounts. As the CRA works to prevent future cyber incidents, we as taxpayers need to be aware if our accounts are affected.
How do I know if my CRA account is affected?
- You will receive a letter (registered mail) from the CRA informing you. Follow the instruction in the letter.
- Your account is disabled. Contact the CRA as soon as you can.
- You notice suspicious activity, e.g. unsolicited changes to your banking, address or personal information, or benefit applications made on your behalf.
How to protect my account and help prevent future incidents?
- Change your user IDs, passwords and security questions and answers as soon as possible.
- Use unique and complex passwords and avoid reusing the same password for different systems.
- Create a personal identification number (PIN). We suggest you set up a personal identification number (PIN) in CRA My Account.
- Sign up for email notifications. These notifications can act as an early warning for potential fraudulent activity.
- Check your online CRA account for suspicious activity.
Word of the Day:
Fraudulent (adjective): cheating, deceitful, dishonest. The noun is “fraud”.
More information: https://www.canada.ca/en/revenue-agency/corporate/security/account-security.html
