Quebec Identity Theft Laws (2026)
About this article
Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Identity theft is a Criminal Code offence in Canada, carrying up to 5 years in prison. The crime itself is the wrongful obtaining of someone's identity information; the related offence of identity fraud (s. 403) covers actually using it. If your information has been taken and used, you've got both criminal and civil routes open.
The first 48 hours matter. Move on these in order:
- Call the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501.
- Place fraud alerts with Equifax (1-800-465-7166) and TransUnion (1-800-663-9980).
- Note: credit freezes are currently only available in Quebec. Ontario adds them in July 2026.
- File with local police — most banks and credit bureaus require a police report number to dispute fraudulent accounts.
When does it apply?
- Anyone whose personal information has been taken and used without consent.
- Covers fraudulent credit applications, bank accounts, government benefits claims, and tax-return fraud.
What to Do If Your Identity Is Stolen in Canada
- Report to the CAFC at 1-888-495-8501 — they coordinate the federal response.
- Call both credit bureaus and put fraud alerts on each file.
- File with local police and keep the report number — banks ask for it.
- Contact your bank and card issuers and flag every account.
- Change every password that matters — email, banking, CRA, MyServiceCanada — and turn on two-factor authentication wherever offered.
- Log into CRA My Account and look for unauthorised filings or address changes.
- Review your credit reports for accounts that aren't yours.
What should you NOT do?
- Don't sleep on it. Identity-theft losses compound by the day.
- Don't pay debts you didn't create. Dispute them in writing with both the creditor and the bureau.
- Don't throw out the paper trail — letters, statements, screenshots, voicemails. All of it is evidence.
- Don't assume it will sort itself out. Identity theft only ends when you actively close it.
- Don't ignore weird CRA mail. A reassessment you didn't expect can be the first sign someone filed in your name.
How Quebec differs from federal law
Identity theft and fraud are Criminal Code offences (federal), but Quebec has additional provincial protections through the Act respecting the protection of personal information in the private sector and the Consumer Protection Act.
- Quebec enacted Act 25 (an Act to modernize legislative provisions as regards the protection of personal information), which significantly strengthened privacy protections starting September 2023. Businesses must now report confidentiality incidents (data breaches) to the Commission d'acces a l'information (CAI) and to affected individuals.
- You have the right to place a security alert on your credit file with Equifax and TransUnion, which requires creditors to verify your identity before extending new credit in your name.
- Quebec's Consumer Protection Act prohibits businesses from requiring your Social Insurance Number as a condition of doing business unless they are legally required to collect it. This limits unnecessary collection of sensitive information.
- The CAI (Commission d'acces a l'information) is Quebec's privacy regulator for both the public and private sectors. You can file a complaint with the CAI if a business mishandled your personal information leading to identity theft.
- Quebec residents can request that businesses that no longer need their personal information destroy it (de-indexation), which is an enhanced right under the modernized privacy law.
Additional Steps in Quebec
If you are a victim of identity theft: (1) File a police report with your local police. (2) Contact Equifax (1-800-465-7166) and TransUnion (1-877-713-3393) to place fraud alerts and obtain your credit reports. (3) Report the fraud to the Canadian Anti-Fraud Centre at 1-888-495-8501. (4) File a complaint with the CAI if a business's data breach caused the theft. (5) Contact creditors to dispute fraudulent accounts.
Relevant Law: Criminal Code (RSC 1985, c C-46), ss. 402-403; Act respecting the protection of personal information in the private sector (CQLR c P-39.1); Consumer Protection Act (CQLR c P-40.1); Act respecting Access to documents held by public bodies (CQLR c A-2.1)
You shouldn't have to hire a lawyer to assert your rights.
Answer a few questions. We generate a personalized letter citing your state's exact statutes, deadlines, and penalties — ready to print and send in minutes.
Lawyers charge $350+. Your letter: $19.
See all 8 letter types →Common Questions
What is the identity theft right in Canada?
Identity theft is a Criminal Code offence in Canada, carrying up to 5 years in prison. The crime itself is the wrongful obtaining of someone's identity information; the related offence of identity fraud (s. 403) covers actually using it. If your information has been taken and used, you've got both criminal and civil routes open.The first 48 hours matter. Move on these in order:Call the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501.Place fraud alerts with Equifax (1-800-465-7166) and TransUnion (1-800-663-9980).Note: credit freezes are currently only available in Quebec. Ontario adds...
When does identity theft apply?
Anyone whose personal information has been taken and used without consent.Covers fraudulent credit applications, bank accounts, government benefits claims, and tax-return fraud.
What should I do if someone stole my identity in Canada?
Report to the CAFC at 1-888-495-8501 — they coordinate the federal response.Call both credit bureaus and put fraud alerts on each file.File with local police and keep the report number — banks ask for it.Contact your bank and card issuers and flag every account.Change every password that matters — email, banking, CRA, MyServiceCanada — and turn on two-factor authentication wherever offered.Log into CRA My Account and look for unauthorised filings or address changes.Review your credit reports for accounts that aren't yours.
What mistakes should I avoid with identity theft?
Don't sleep on it. Identity-theft losses compound by the day.Don't pay debts you didn't create. Dispute them in writing with both the creditor and the bureau.Don't throw out the paper trail — letters, statements, screenshots, voicemails. All of it is evidence.Don't assume it will sort itself out. Identity theft only ends when you actively close it.Don't ignore weird CRA mail. A reassessment you didn't expect can be the first sign someone filed in your name.
Identity Theft in other states
Same topic, different jurisdiction. Pick the one that applies to you.