All Resources
Security Alerts
Security Alert: Fake CRA Email Scam Targeting Ontario Businesses
We're seeing a renewed wave of fake Canada Revenue Agency emails targeting Ontario businesses — most claiming a refund, an audit, or a required action. This short alert covers the tell-tale signs and what to do if a user interacts with one.
July 17, 2026 3 min read Greater Sudbury & Ontario
What the CRA scam emails look like
- Subject lines about refunds, audits, GST/HST filings, or 'urgent action required'
- CRA logos and Government of Canada branding pulled from public assets
- Link to a fake CRA sign-in page that captures credentials or banking details
- Sometimes an attached PDF or HTML file rather than a direct link
The real CRA doesn't do this
- CRA does not send refunds by email or text
- CRA does not request personal or banking information by email
- CRA does not threaten arrest, deportation, or immediate legal action
- Verify anything suspicious by signing into My Account or My Business Account directly — never through a link in an email
If someone clicked
- Do not enter any further information
- Report the email to your IT team and delete it
- If banking information was entered, contact your bank immediately
- If Microsoft 365 credentials were entered, reset the password and revoke sessions
Train your team to spot scams like this
Security awareness training keeps threats like this top-of-mind — with periodic phishing simulations to build recognition.
Keep exploring
Related services, locations, and resources
Related services
- Cybersecurity Services
Endpoint protection, MFA, email filtering, and M365 hardening.
- Managed IT Services
Proactive monitoring, patching, and predictable monthly support.
- Microsoft 365 Support
Exchange, Teams, SharePoint, OneDrive, and licensing.
- Backup & Disaster Recovery
Backup strategy, monitoring, and recovery testing.
Related service areas
Related resources
- Active Microsoft 365 Phishing Campaign Targeting Northern Ontario Businesses
A widespread Microsoft 365 login-harvest phishing campaign is currently hitting Ontario SMBs. Watch for the…