Security Alert: Fake CRA Email Scam Targeting Ontario Businesses
We're seeing a renewed wave of fake Canada Revenue Agency emails targeting Ontario businesses, most claiming a refund, an audit, or a required action. This short alert covers the tell-tale signs and what to do if a user interacts with one.
What the CRA scam emails look like
- Subject lines about refunds, audits, GST/HST filings, or 'urgent action required'
- CRA logos and Government of Canada branding pulled from public assets
- Link to a fake CRA sign-in page that captures credentials or banking details
- Sometimes an attached PDF or HTML file rather than a direct link
The real CRA doesn't do this
- CRA does not send refunds by email or text
- CRA does not request personal or banking information by email
- CRA does not threaten arrest, deportation, or immediate legal action
- Verify anything suspicious by signing into My Account or My Business Account directly, never through a link in an email
Want this handled by someone local?
We support businesses across Greater Sudbury and Northern Ontario with managed IT, security, and infrastructure work. A short conversation is usually enough to tell you what needs attention first.
Book a Free 30-Minute ConsultationIf someone clicked
- Do not enter any further information
- Report the email to your IT team and delete it
- If banking information was entered, contact your bank immediately
- If Microsoft 365 credentials were entered, reset the password and revoke sessions
Joshua Arimoro
Joshua Arimoro is the Principal Consultant at Nickel City Tech Solutions, a managed IT and cybersecurity provider based in Lively, Ontario, serving businesses across Greater Sudbury and Northern Ontario. He works hands-on with Microsoft 365, server and network infrastructure, endpoint management, and backup and recovery for small and mid-sized organisations.
More about our teamTrain your team to spot scams like this
Security awareness training keeps threats like this top-of-mind, with periodic phishing simulations to build recognition.
Related services, locations, and resources
Related services
- Cybersecurity Services
Endpoint protection, MFA, email filtering, and M365 hardening.
- Managed IT Services
Proactive monitoring, patching, and predictable monthly support.
- Microsoft 365 Support
Exchange, Teams, SharePoint, OneDrive, and licensing.
- Backup & Disaster Recovery
Backup strategy, monitoring, and recovery testing.
Related service areas
Related resources
- Active Microsoft 365 Phishing Campaign Targeting Northern Ontario Businesses
A widespread Microsoft 365 login-harvest phishing campaign is currently hitting Ontario SMBs. Watch for the…