Phishing Scams and Identity Theft
The privacy of your personal information is our priority, which is why we take measures to ensure that the means we use to communicate with you are secure.
Despite our vigilance, a scammer may still, from time to time, try to take advantage of the relationship of trust we have with our clients, and posing as a Revenu Québec employee, may contact you by telephone, by email or by mail. In these communications, the scammer will use different pretexts to gather personal information from you.
This activity, known as "phishing", is a criminal activity. Phishing often involves the use sophisticated methods to trick you. Scammers may go so far as to create a replica of a logo, a web page, an email or some other official document. The consequences for victims of this type of fraud can be very costly.
Exercise caution to avoid becoming a victim.
It is important to adhere to a number of basic rules and to be careful when handling your personal data; this will ensure the privacy of your information is protected.
We use technology and equipment that safeguards and protects the confidentiality of transactions and communications via our online services. Our employees follow clear guidelines when communicating with taxpayers to ensure there is no confusion on the taxpayer's part.
If you receive an email, a telephone call or a letter that claims to be from Revenu Québec and seems suspicious to you, keep in mind that Revenu Québec does not do the following:
- Revenu Québec never requests, by email, personal information of any kind (social insurance number, health insurance number, driver's licence number, passport number, or password).
- Revenu Québec never leaves telephone messages that include confidential information.
- Revenu Québec never communicates personal information concerning you to a person unless it is sure that the person receiving the information is authorized to do so.
If your doubt persists, ask yourself the following:
- Am I expecting a refund or some other sum of money from Revenu Québec (for example, an income tax or consumption tax refund, a support payment, an amount related to unclaimed property)?
- Does the situation sound too good to be true?
- Do I owe money to Revenu Québec, or do I owe money under a program administered by Revenu Québec (for example, the support payment collection program)?
- Is the person contacting me asking for information that Revenu Québec already has on file concerning me?
- Have I given Revenu Québec my email address? If not, how did the person contacting me get it?
- Am I absolutely confident as to the identity of the person asking me for personal information?
To find out if the kind of transaction proposed by the person contacting you is one we use, refer to Payment Options.
If you suspect that you may have been contacted by someone claiming to be a Revenu Québec employee who is not, contact us.
Anticipate the consequences
If there are signs that you have been the victim of identity theft, you may, depending on the extent of the fraud, have to inform the following organizations:
- Canada's main credit reporting agencies
- Canada Revenue Agency
- Canada Post
- your financial institution
- credit card issuers
- your local police department
Report fraudulent activity
Identity-related crimes such as phishing and identity theft compromise the security of your personal information because the scammer can use your name, without your knowledge, in dealings with financial institutions and various government departments and bodies.
If you receive a suspicious email, report it to the Canadian Anti-Fraud Centre, or to your financial institution or the organization that claims to have sent it.
The Canadian Anti-Fraud Centre is the central repository in Canada for data, information and resource material as it relates to fraud. Its mandate is to prevent fraudulent activity and to provide assistance to victims of fraud.
You can also contact the Canadian Anti-Fraud Centre by telephone, toll-free, at 1 888 495-8501, or by fax, toll-free, at 1 888 654-9426.
Do not phone the telephone numbers, use the email addresses or go to any websites shown in a suspicious email.