Taxpayers may receive communications from someone who claims to be from the CRA. These con artists request the taxpayer’s personal information such as a social insurance number, credit card number, bank account number, or passport number. This resource from CRA provides examples of fraudulent (deceitful or dishonest) communications through phone, online, mail, e-mail, text message. It also provides guidelines to the taxpayers to help identify communications not from the CRA .
Link: https://www.canada.ca/en/revenue-agency/corporate/security/protect-yourself-against-fraud.html