CRA refund texts and emails around tax season
It is a scam. The CRA does not text about refunds, balances or account updates, and never sends money by e-transfer.
Messages about a waiting refund, a balance owing or an account that "needs updating" link to a page that looks like the CRA sign-in. Entering your details hands over your SIN, banking information or CRA login.
Is this the message you received?
Reported in CanadaCanada Revenue Agency. Reference number: [reference removed]. This is a reminder that your CRA account information needs to be updated within the next 48 hours. Please take a moment to complete this action on [link removed] to ensure uninterrupted access to your services.
This one arrived as an image inside a text, laid out like a letter with the CRA logo. The reference number and the deadline change between waves. The link to "update your account" and the threat of losing access stay constant.
How it works
These messages spike from February to May and again whenever benefit payments go out. They say "claim your refund", "update your account" or "your balance is due" and link to a page that copies the CRA sign-in. Some arrive as a picture of a letter rather than plain text, which gets past spam filters and looks more official.
A common version says the CRA owes you a refund and asks you to click a link and enter your banking details so the money can be sent by e-transfer. The CRA never sends refunds or payments by e-transfer or text, and never pressures you to click a link to avoid a penalty.
How the real CRA contacts you
The CRA says it will not use text messages or instant messaging such as Facebook Messenger or WhatsApp. It contacts you by mail, by phone, or through messages inside your CRA account.
There is one exception. If you chose the telephone option for sign-in, the CRA sends a one-time passcode by text when you are signing in to your account yourself. That text contains a code and nothing else. The CRA says you should never share that code with anyone, including anyone calling or texting to ask for it.
Source: CRA: Recognize a scam (October 2026)
Does the CRA send text messages?
No, with one exception. The CRA does not text about refunds, benefits, balances or account updates, and never sends money by e-transfer. The only text the CRA sends is a one-time sign-in code, when you are signing in yourself and chose to receive codes by phone. Nobody from the CRA will ever ask you to read that code out.
What to do
- Delete the message. Do not click the link, even out of curiosity.
- Check your real CRA account by typing canada.ca into your browser yourself.
- If you entered details on a fake page, call your bank, then report to the Canadian Anti-Fraud Centre at 1-888-495-8501.
- If you tapped the link, entered details or paid: here is exactly what to do next, step by step.
- Report the text by forwarding it to 7726 (SPAM). How to do that on iPhone and Android.
- Got a different message? Run it through our one-minute checker.
Sources
If this has already happened to you, our scam recovery visit can lock down your accounts and devices. And if you are just not sure whether something is a scam, asking us is always free.