Phishing Scams and Identity Theft
The confidentiality of your personal information is our priority, which is why we take measures to ensure that the means we use to communicate with you are secure.
Despite our vigilance, scammers sometimes try to take advantage of the relationship of trust we have with our clients. Posing as a Revenu Québec employee, they may contact you by phone, email, text or mail and attempt to gather personal information from you using various pretexts.
This activity, known as "phishing", is a criminal activity. Phishing often involves the use sophisticated methods to trick you. Scammers may go so far as to create a replica of a logo, a web page, an email or some other official document. The consequences for victims of this type of fraud can be very costly.
Exercise caution to avoid becoming a victim.
To protect the confidentiality of your personal information, we exercise great care when handling your personal data. It is also very important that you follow certain basic rules.
The technology and equipment we use safeguards and protects the confidentiality of transactions and communications via our online services.
We regularly do telephone or online surveys, or use firms to do them for us, to learn what our clients think. For these surveys:
- no information from our data banks is sent to the firms;
- no one is authorized to ask taxpayers about tax information on our behalf; and
- the survey firms cannot use the information collected for purposes other than those prescribed by us.
If you receive an email, text, phone call or letter that claims to be from Revenu Québec and seems suspicious to you, keep in mind the following:
- We never request the following personal information by email or text:
- the amount from line 199 of your income tax return
- your date of birth
- a notice of assessment number
- a notice of determination number
- your social insurance number
- your health insurance number
- your driver's licence number
- your passport number
- your credit or debit card numbers
- a password
- We never mention confidential information in a phone message.
- We never share your personal information with anyone without making sure that the person receiving it is authorized to do so.
We may send you information, but only if you ask us to. We may send:
- a temporary access code by text or automated call if you are signing in to My Account via a Sign-In Partner;
- a verification code by email, text or automated call if you are using clicSÉQUR − Citoyens to sign in to My Account;
- a URL to paste into your web browser to access the Order Prefilled TP-64.3-V Forms online service (available in French only), where you can download prefilled forms.
How to avoid phishing scams and identity theft
- If you have a doubt about the sender of an email or text, do not provide any information. lf you did so, contact us.
- Always verify the identity of the person requesting information and that the request is legitimate, even if the situation seems urgent.
- If in doubt, ask for the person's phone number to call back, which will give you time to check.
- If the phone number of an incoming call seems familiar (the area code is the same as yours or the number displayed is the same as a company you know), exercise caution, because it may be a trick used by a scammer to gain your trust.
- If you think a scammer has left a message in your voicemail, do not delete it or call back. Contact us.
- If you think a scammer sent you a fraudulent email or text, do not click on the link or attachment and do not reply to the sender. By taking no action, you avoid confirming your email's validity or your phone number. Do not delete the message, contact us instead.
- Do not disclose any of your access codes or passwords to a person you do not know. If you want to grant an authorization or a power of attorney to a designated person, follow one of the steps below:
If you are unsure about something you received from us, ask yourself the following questions:
- Am I expecting a refund or some other sum of money from Revenu Québec (for example, an income tax or consumption tax refund, a support payment, an amount related to unclaimed property)?
- Does the situation sound too good to be true?
- Do I owe Revenu Québec any money? Do I owe money under a program administered by Revenu Québec (for example, the support payment collection program)?
- Is the person asking for information that Revenu Québec already has on file?
- Have I given Revenu Québec or my professional representative my email address? If not, how did this person get it?
- Am I absolutely confident as to the identity of the person asking me for personal information?
If you still think the communication you received is suspicious after answering these questions, do not reply, but contact us instead.
To find out if the kind of transaction proposed by the person contacting you is one we use, refer to Payment Options.
Report fraudulent activity
Identity-related crimes such as phishing and identity theft compromise the security of your personal information because the scammer can use your name, without your knowledge, in dealings with financial institutions and various government departments and bodies.
What should you do if you receive a suspicious communication?
The Canadian Anti-Fraud Centre is the central repository in Canada for fraud data, information and documentation. It exists to prevent fraudulent activity and to provide assistance to victims of fraud.
Do not use the telephone numbers, email addresses or websites shown in a suspicious communication. Look for the organization's contact information by searching on your own.
What should you do in case of fraud or identity theft?
If there are signs that you have been the victim of identity theft or you are concerned that you were targeted by a scammer, contact us. We must be informed of this situation so we can enact additional measures to protect your personal information.
For more information, see the Identity Theft in Brief! checklist on the Commission d'accès à l'information site.