Identity theft can range from a single fraudulent credit card charge to a full identity takeover — fake accounts, false tax returns, government benefits fraud, and employment fraud all in your name. Acting within the first 24–48 hours dramatically limits the damage.
This guide covers every step in the right order.
First 24 hours: Contain the damage
1. Contact your bank and credit card issuers immediately
Call the fraud departments of all your financial institutions. Do not wait for your next statement.
| What to Do | Details |
|---|---|
| Report fraudulent transactions | Banks are required to investigate and in most cases will reimburse fraud losses |
| Freeze or cancel compromised accounts | Ask for new account numbers and new cards |
| Change online banking passwords | Use a unique password; enable two-factor authentication |
| Enable fraud alerts on accounts | Text/email notifications for every transaction |
| Request account transaction history | Look back 60–90 days for unfamiliar charges |
Most Canadian banks have 24/7 fraud lines. The numbers are on the back of your card and on the institution’s website.
2. Place a fraud alert with both credit bureaus
Contact Equifax and TransUnion separately — they do not share fraud alerts.
| Bureau | Fraud Alert Phone | Online |
|---|---|---|
| Equifax Canada | 1-800-465-7166 | equifax.ca |
| TransUnion Canada | 1-800-663-9980 | transunion.ca |
A fraud alert notifies lenders to take extra steps to verify your identity before approving new credit in your name. It is free and lasts up to 6 years. Request a free copy of your credit report at the same time — look for accounts you did not open, inquiries you did not authorize, and addresses you do not recognize.
→ See: Equifax vs TransUnion Canada | How to Dispute a Credit Report Error
3. Report to the Canadian Anti-Fraud Centre (CAFC)
The CAFC is the national system for reporting identity theft and fraud.
| Contact | Details |
|---|---|
| Phone | 1-888-495-8501 |
| Online | antifraudcentre-centreantifraude.ca |
| Hours | Monday–Friday, 9am–4:45pm ET |
You will receive a reference number — keep it. The CAFC data is shared with law enforcement agencies across Canada and the report helps establish a paper trail.
4. File a police report
Report to your local police department (in person or online, depending on your municipality).
| Why You Need It | Who Requires It |
|---|---|
| Disputing fraudulent accounts with creditors | Most financial institutions |
| Removing fraudulent debts from your credit report | Credit bureaus |
| Filing a CRA identity dispute | Canada Revenue Agency |
| Potential insurance claim | Some identity theft insurance policies |
Get the incident or file number and keep it accessible. You will need it repeatedly.
Within the first week: Protect government accounts
5. Notify the CRA
If your SIN has been compromised, thieves may file a fraudulent tax return to claim your refund or access your CRA account.
| Action | How |
|---|---|
| Call CRA’s identity protection hotline | 1-800-959-8281 (individuals) |
| Flag your account for extra verification | CRA can put a marker on your account requiring identity verification before processing |
| Check CRA My Account | Look for filed returns, address changes, direct deposit changes, or benefit claims you did not initiate |
| Change your CRA My Account password | Use a new, unique password |
If a fraudulent return was filed in your name, you will need to file your actual return on paper (not electronically) with supporting documentation.
→ See: CRA My Account Setup Guide
6. Contact Service Canada if your SIN was exposed
If you believe your SIN was stolen:
| Action | Contact |
|---|---|
| Report SIN compromise | Service Canada — 1-800-622-6232 |
| Request a new SIN | Only granted in limited circumstances (proven fraud); require police report and documentation |
| Check for fraudulent EI claims | Log into My Service Canada Account and review EI claim history |
A new SIN is issued only when there is clear evidence the existing one has been fraudulently used — it is not routine. Service Canada will flag your SIN for additional monitoring.
7. Contact the provincial motor vehicle registry
If your driver’s licence was lost or stolen, contact your provincial registry to cancel and replace it. A stolen licence can be used for in-person identity fraud.
| Province | Registry |
|---|---|
| Ontario | ServiceOntario |
| BC | ICBC |
| Alberta | Service Alberta |
| Quebec | SAAQ |
| Others | Provincial registry |
Ongoing: Monitor and dispute
8. Dispute fraudulent accounts
For each fraudulent account or trade line on your credit report:
- Get your credit report from both bureaus (free annually)
- Identify accounts or inquiries you did not authorize
- Write a dispute letter to the bureau and to the creditor
- Include: your police report number, fraud alert confirmation, and a written statement
- Keep copies of everything
Credit bureaus must investigate disputes within 30 days (in most cases). If they cannot verify the account, they must remove it.
9. Check for employment fraud
Fraudsters sometimes use stolen identities to obtain employment and generate T4 slips — which can cause unexpected tax issues.
| Sign | Action |
|---|---|
| T4 slip in your name from an employer you never worked for | Contact the employer directly; notify CRA |
| CRA says you owe tax on income you never earned | File a fraudulent income dispute with CRA |
| Employment Insurance claim filed without your knowledge | Contact Service Canada and file a report |
10. Continue monitoring
| Action | Frequency |
|---|---|
| Check credit reports (Equifax and TransUnion) | Every 3 months during recovery |
| Review bank and credit card statements | Monthly |
| Check CRA My Account | Every few months |
| Check My Service Canada Account | Every few months |
Identity theft recovery checklist
| ☐ | Action | Who to Contact |
|---|---|---|
| ☐ | Contact financial institutions — freeze accounts, report fraud | Banks, credit card issuers |
| ☐ | Place fraud alert with Equifax | 1-800-465-7166 |
| ☐ | Place fraud alert with TransUnion | 1-800-663-9980 |
| ☐ | Report to Canadian Anti-Fraud Centre | 1-888-495-8501 |
| ☐ | File police report | Local police |
| ☐ | Contact CRA identity protection | 1-800-959-8281 |
| ☐ | Check CRA My Account for fraudulent activity | canada.ca/my-cra-account |
| ☐ | Contact Service Canada if SIN exposed | 1-800-622-6232 |
| ☐ | Dispute fraudulent accounts in credit reports | Equifax and TransUnion |
| ☐ | Change all passwords (email, banking, government) | All accounts |
| ☐ | Enable two-factor authentication | All accounts |
| ☐ | Set up ongoing credit monitoring | Equifax, TransUnion, or third-party |