Five Facts You Need to Know about Suspicious E-mails. IRS and CRA.

This press release came out from the IRS…

There are many e-mail scams circulating that fraudulently use the Internal Revenue Service name or logo as a lure. The goal of the scam – known as phishing – is to trick you into revealing personal and financial information. The scammers can then use your personal information – such as your Social Security number, bank account or credit card numbers – to commit identity theft and steal your money.

Here are five things the IRS wants you to know about phishing scams.

1.  The IRS does not send unsolicited e-mails about a person’s tax account or ask for detailed personal and financial information via e-mail.

2. The IRS never asks taxpayers for their PIN numbers, passwords or similar secret access information for their credit card, bank or other financial accounts.

3. If you receive an e-mail from someone claiming to be the IRS or directing you to an IRS site,

  • Do not reply to the message.
  • Do not open any attachments. Attachments may contain malicious code that will infect your computer.
  • Do not click on any links. If you clicked on links in a suspicious e-mail or phishing Web site and entered confidential information, visit and enter the search term ‘identity theft’ for more information and resources to help.

4. You can help shut down these schemes and prevent others from being victimized. If you receive a suspicious e-mail that claims to come from the IRS, you can forward that e-mail to a special IRS mailbox, You can forward the message as received or provide the Internet header of the e-mail. The Internet header has additional information to help us locate the sender.

5. Remember, the official IRS Web site is Do not be confused or misled by sites claiming to be the IRS but end in .com, .net, .org or other designations instead of .gov.

And here is how the CRA deals with phishing from my own personal experience working there. 

The CRA does not allow their staff to communicate via email unless you specifically ask for it because the emails are not encrypted and they worry that sensitive data can be hijacked.  As a result of this policy, no one from the CRA will ever ask you for any confidential data.  Even if you get asked for something from the CRA and you are worried it is a scan, you can ask for them to send you a legal document called a request, or requirement, for information which will contain the name of the collector and their manager or the director of the tax office on it for verification purposes. 

Information going or coming to the CRA will always end in or (french version).

Author: Warren Orlans

Welcome to inTAXicating. inTAXicating has been published since 2008 to provide clarity around Canadian taxation issues, primarily related to the Canada Revenue Agency. As the primary author, Warren Orlans, has over 20-year's experience in the taxation industry, 11 of them working for the Canada Revenue Agency (CRA), and 7-years working in the private sector Managing the tax departments for large financial institutions. If you have a collections, compliance or audit issue with the CRA, inTAXicating is the place you need to contact. inTAXicating works in strategic partnership with amazing accountants, tax lawyers, insolvency practitioners, mortgage brokers, debt counselling experts and much more. If you have a tax question, email it to or to

One thought on “Five Facts You Need to Know about Suspicious E-mails. IRS and CRA.”

  1. I also have a question about the CRA. Would you be able to help me? Can I email you the question? Do you have a consulting practice set up? If you can help me and my client there are substantial funds we are looking at recovering, and I would be more than happy to recommend to them that was pay a consulting fee to you for all you efforts.

    It’s been going on for about 5 years and we seem completely bamboozled by the assessment and the lack of a response.

    I’ll email it to you.

    Thanks again.



Would Love to Hear Your Thoughts

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s