Skip to content

CRA

Keep Your CRA Account Secure: Settings, Warning Signs, Hacked Accounts

Check your CRA account regularly for changes you did not make, such as a new address, new direct deposit details or a new representative. Use a unique password, add a backup passcode method and turn on email notifications. If you suspect someone got in, call the CRA right away.

By Fact-checked by Samuel Athur

Last verified How we check our facts

Warning signs to look for

  • Your mailing address changed without your knowledge
  • Your banking or direct deposit details changed
  • A representative was added that you did not authorize
  • A benefit application you did not make
  • A CRA notice showing changes you weren't aware of

If you see any of these, contact the CRA. The numbers are below.

Security settings you can change

Sign in, then choose Security settings on the Welcome page. What you see depends on how you sign in:

Sign-in optionWhat you can manage
CRA user ID and passwordChange your user ID or password, revoke your user ID, see your recent sign-in history, manage passcode methods and your PIN.
Sign-In Partner (bank)Passcode methods and your PIN. Your banking password is managed by your bank.
Provincial partnerYour PIN. Alberta.ca users can also manage passcode methods. Your login is managed by your province.

Good habits

  • Use a password for the CRA that you don't use anywhere else, including your bank.
  • Add a backup passcode method so you are not locked out if you lose your phone.
  • Keep your email address, phone and mailing address up to date so the CRA can reach you.
  • Turn on email notifications so you hear about changes to your account.
  • Set up a CRA phone PIN.
  • On a shared or public computer, sign out and clear the browser cache when you finish.
  • Never share your SIN, CRA user ID, password or security code. Don't email personal information to the CRA: its email isn't secure.

If your account was compromised

The CRA may:

  • Temporarily lock your account
  • Stop benefit and credit payments until your identity is confirmed
  • Contact you by phone or registered mail with steps to confirm who you are
  • Offer free credit protection in some cases

To prove your identity, you may be asked for a copy of government ID, a proof of address (such as a utility bill) and a bank statement or letter showing your direct deposit details.

A real CRA letter tells you how to regain access. If a call or message seems off, check it with our guide to verifying a CRA call.

Phone numbers

Report suspicious activity on your CRA online account

1-800-265-2577

7 days a week, 6 am to 3 am Eastern time (automated)

From outside Canada and the U.S.: 1-613-221-3176

Report fraud or identity theft (individuals)

1-833-995-2336

Monday to Friday, 8 am to 4 pm

From outside Canada and the U.S.: 1-613-221-3117

Related

Is It Really the CRA? How to Spot a CRA Scam Call, Email or Text The CRA never demands payment by e-transfer, gift cards, prepaid cards or cryptocurrency, never threatens arrest or deportation, and never sends refunds by e-transfer or text. It only texts for sign-in passcodes. If in doubt, hang up and call the CRA on an official number. How to Check if a Call From the CRA Is Real Get the caller's name, office and callback number, then hang up. Don't trust caller ID. Check the number with the CRA's official verification tool or call 1-800-959-8281 yourself. Never give personal information on a call you didn't expect. CRA PIN: How to Create a 6-Digit PIN for Phone Calls A CRA PIN is a 6-digit number that confirms your identity when you call the CRA individual or benefits lines, so you skip the identity questions. Create it in your CRA account under Security settings, or with an agent at 1-800-959-8281. CRA Account Locked or Revoked: How to Get Back In Too many wrong passcodes lock you out for 30 minutes; three lockouts make it permanent and you must call the CRA. For forgotten credentials or a revoked user ID, register again for a new credential using your existing passcode method. If the CRA locked your account, call 1-800-959-8281. CRA Phone Number and Contact Numbers (2026): Every Line and Hours The main CRA phone number is 1-800-959-8281 for personal tax and CRA account questions. For benefits like the Canada child benefit call 1-800-387-1193, and for businesses 1-800-959-5525. All three are open Monday to Friday, 8 am to 8 pm Eastern time, and closed on weekends and public holidays.

Frequently asked questions

How do I see who signed in to my CRA account?

If you use a CRA user ID and password, open Security settings and choose to view your recent CRA sign-in history.

Will the CRA email me asking for my information?

No. The CRA says it will never ask for personal information by email. Delete any email that does.

Why did the CRA lock my account?

The CRA may disable access if it suspects your account was compromised. Follow the instructions in its letter, or call the CRA. You can't register again to get around a CRA lock.

Sources

North Help Desk is an independent guide, not a government website. Rules, amounts and phone hours can change; always confirm on the official page before you act. Spotted something out of date? Tell us.