Cybersecurity

Don't take the bait!

Watch out for cyberattacks and fraud all year long—not just at tax time. Whether you’re an individual, a business owner or a business representative, here are some time-tested cybersecurity practices to help prevent fraud and protect your confidential information.

Ways to spot fraud

Unsure about something that looks like it’s from us?

Emails and text messages from us NEVER contain any confidential information or clickable links. You have to log in to My Account for individuals to view the actual message.

See How to Tell if a Message Is Really From Revenu Québec.

Four good habits to adopt

If you have doubts about emails, calls or texts, protect yourself with good habits:

Don’t click on links or open attachments (we NEVER send any).
Don’t reply to the sender.
Never give personal information.
Don’t reply to messages that require immediate action.

See how to prevent phishing and identity theft.

Got questions? We've got answers – individuals

If you get a suspicious message, report it to the Canadian Anti-Fraud Centre and contact us.

Follow the 10 security rules given on the How to Use Our Online Services Securely page to make sure your information is secure when using our online services. You can also sign up to receive alerts when certain incidents occur in your file. For more information, see Alerts.

Yes. You can receive your documents online only if you gave your consent in one of the following ways:

accepting the new conditions for use for My Account for individuals
changing your preferences in My Account
completing lines 10.1 and 10.2 of your income tax return
filing form TP-1000.TE-V, Online Filing of the Income Tax Return by an Accredited Person
contacting us

You will continue to receive documents online only until you revoke your consent.

Protect your business against fraud

Do you have a business or act on behalf of one?

Have you recently checked that your information in My Account for businesses is still correct? Are the powers of attorney, authorizations and access rights up-to-date? Have you raised staff awareness of best practices to protect your data?

Don’t wait! Adopt 10 good habits to protect against fraud.

Got questions? We've got answers – Businesses

When in doubt, contact us quickly to report the incident. To find out how, visit the Report a Phishing or Fraud Attempt page.

To know how to spot the difference between something from us and a scam, see our communications policy.

To send us confidential documents easily and securely, you can:

send them from the communications centre or inbox in My Account for businesses (click the envelope in the top-right corner of your screen); or
contact us so we can tell you the best way to send them, based on the situation.

To prevent fraud, always prioritize electronic payments.