If your identity is stolen in Canada, act the same day: contact your bank and card issuers, report the fraud to your local police and to the Canadian Anti-Fraud Centre, and ask Equifax Canada and TransUnion Canada to place a fraud alert on your credit files. Then secure your online accounts, notify the government offices linked to any stolen documents, and keep a written log of every step.
What identity theft looks like in Canada
Identity theft happens when someone collects your personal information, such as your name, date of birth, Social Insurance Number (SIN), bank details or passwords. Identity fraud is what follows: the criminal uses that information to open accounts, take out loans, redirect your mail, claim benefits or make purchases in your name.
Warning signs include:
- Bills or statements for accounts you never opened.
- Unfamiliar transactions on your bank or credit card statements.
- Calls from collection agencies about debts you do not recognize.
- A credit report showing new accounts or hard inquiries you did not authorize.
- Mail that suddenly stops arriving, which may mean it has been redirected.
- Notices from the Canada Revenue Agency about changes you did not make.
What to do if your identity is stolen: first 24 hours
- Call your bank and credit card companies. Use the numbers on the back of your cards or on official statements. Freeze or close affected accounts and ask for new cards.
- Report to your local police. Ask for a file or occurrence number. Banks, credit bureaus and other organizations may ask for it.
- Report to the Canadian Anti-Fraud Centre. The centre collects reports to track fraud trends and support investigations. You can report online through the Canadian Anti-Fraud Centre or by phone at 1-888-495-8501.
- Contact both credit bureaus. Ask Equifax Canada and TransUnion Canada to add a fraud alert, so lenders take extra steps to verify your identity before approving new credit.
- Change your passwords. Start with your email account, because access to email lets criminals reset passwords everywhere else.
Notify government offices for stolen documents
Depending on what was taken or misused, contact the offices responsible for each document:
| Document or account | Who to contact | Why |
|---|---|---|
| Social Insurance Number | Service Canada | Report misuse and review your SIN record |
| Tax and benefits account | Canada Revenue Agency | Protect your CRA account and benefit payments |
| Passport | Passport Program (IRCC) | Report it lost or stolen so it is cancelled |
| Driver’s licence and health card | Your provincial or territorial agency | Report and replace the card |
| Mail redirection | Canada Post | Stop fraudulent mail forwarding |
| Bank and investment accounts | Each financial institution | Freeze accounts and monitor activity |
Government information on identity theft and fraud is available on Canada.ca. If you have never needed to replace your SIN information before, read also our guide on how to get a Social Insurance Number in Canada to understand how the number is issued and protected.
Secure your digital life
Many identity theft cases begin with a compromised email or phone account. Once your immediate reports are made, lock down your online presence:
- Change passwords for email, banking, government and shopping accounts, using a different strong password for each.
- Turn on two-factor authentication everywhere it is offered. Our two-factor authentication guide walks you through setting it up.
- Ask your mobile carrier to add a PIN or passcode to your account to prevent SIM-swap fraud.
- Check email forwarding rules and connected devices for anything you did not set up.
- Run a reputable security scan on your computer and phone.
Repair your credit file
After the first emergency steps, request your credit reports from both bureaus and go through them line by line. Dispute every account, inquiry or address you do not recognize, and attach your police file number. Read also our step-by-step guide on how to dispute a credit report error in Canada.
Fraud alerts are a strong first layer, but they are not a guarantee. Keep checking your reports every few months for at least a year after the theft, because criminals sometimes wait before using stolen information.
Keep a fraud log: checklist
Recovering from identity theft can take weeks or months. A simple log makes every conversation easier:
- Date and time of each call or email.
- Name of the organization and the person you spoke to.
- Reference, claim or file numbers.
- What was agreed and any next steps.
- Copies of letters, emails and police reports.
- Receipts for any costs you incur, such as replacement documents.
Special situations: older relatives, children and small businesses
Identity theft does not only affect working adults. Older Canadians are frequent targets of phone scams in which fraudsters pose as bank investigators, police officers or grandchildren in trouble. If you help an older relative, agree on a simple rule: no one should ever share banking codes or move money because of an unexpected call, and any request should be checked by calling the bank directly.
Children can also be victims, because a clean credit history is valuable to criminals and the fraud may go unnoticed for years. Keep children’s birth certificates and SIN documents in a safe place, and be cautious about forms that request them. Small business owners should watch for fake invoices, changes to supplier banking details and attempts to access business tax accounts. In each case, the same core steps apply: report quickly, document everything and secure the affected accounts.
How to lower your risk in the future
Most identity theft starts with information that was handed over by mistake, often during a scam. The holiday shopping season brings more fake websites, delivery-notification texts and payment scams. Read also our guide on how to spot and avoid online shopping scams.
- Never give your SIN unless it is legally required, such as to an employer or financial institution for tax reporting.
- Do not click links in unexpected texts or emails claiming to be from your bank, the CRA or a delivery company.
- Shred documents with personal information before recycling them.
- Collect your mail promptly and use a locked mailbox if possible.
- Review bank and card statements every month.
- Be careful about what you share on social media, such as your full birth date and address.
FAQ
Do I need to report identity theft to the police?
Yes, it is recommended. A police file number supports your disputes with banks and credit bureaus and helps prove you are a victim.
Will my bank refund fraudulent charges?
Many banks and card issuers have zero-liability policies for unauthorized transactions, especially if you report them quickly. Check your cardholder agreement and contact your bank right away.
Can I get a new SIN after identity theft?
A new SIN is issued only in limited cases, usually when there is proof the number has been misused and you have been harmed. Contact Service Canada to discuss your situation.
How long does a fraud alert last?
The duration depends on the credit bureau and the type of alert. Ask each bureau how long its alert lasts and how to renew it.
Is identity theft a crime in Canada?
Yes. Identity theft and identity fraud are offences under the Criminal Code of Canada.
Need help or want to suggest a topic? Contact the Labobuzz team through our contact page. This article is general information, not legal advice.