Identity Theft in Canada
Reviewed by the Commoner Law Editorial Team. Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Identity theft is a Criminal Code offence in Canada, carrying up to 5 years in prison. The crime itself is the wrongful obtaining of someone's identity information; the related offence of identity fraud (s. 403) covers actually using it. If your information has been taken and used, you've got both criminal and civil routes open.
The first 48 hours matter. Move on these in order:
- Call the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501.
- Place fraud alerts with Equifax (1-800-465-7166) and TransUnion (1-800-663-9980).
- Note: credit freezes are currently only available in Quebec. Ontario adds them in July 2026.
- File with local police — most banks and credit bureaus require a police report number to dispute fraudulent accounts.
When does it apply?
- Anyone whose personal information has been taken and used without consent.
- Covers fraudulent credit applications, bank accounts, government benefits claims, and tax-return fraud.
What to Do If Your Identity Is Stolen in Canada
- Report to the CAFC at 1-888-495-8501 — they coordinate the federal response.
- Call both credit bureaus and put fraud alerts on each file.
- File with local police and keep the report number — banks ask for it.
- Contact your bank and card issuers and flag every account.
- Change every password that matters — email, banking, CRA, MyServiceCanada — and turn on two-factor authentication wherever offered.
- Log into CRA My Account and look for unauthorised filings or address changes.
- Review your credit reports for accounts that aren't yours.
What should you NOT do?
- Don't sleep on it. Identity-theft losses compound by the day.
- Don't pay debts you didn't create. Dispute them in writing with both the creditor and the bureau.
- Don't throw out the paper trail — letters, statements, screenshots, voicemails. All of it is evidence.
- Don't assume it will sort itself out. Identity theft only ends when you actively close it.
- Don't ignore weird CRA mail. A reassessment you didn't expect can be the first sign someone filed in your name.
Use the jurisdiction bar at the top of the page to pick your province — you'll see how provincial law differs from Canadian federal law.
6 provinces available
Common Questions
When does identity theft apply?
Anyone whose personal information has been taken and used without consent.Covers fraudulent credit applications, bank accounts, government benefits claims, and tax-return fraud.
What should I do if someone stole my identity in Canada?
Report to the CAFC at 1-888-495-8501 — they coordinate the federal response.Call both credit bureaus and put fraud alerts on each file.File with local police and keep the report number — banks ask for it.Contact your bank and card issuers and flag every account.Change every password that matters — email, banking, CRA, MyServiceCanada — and turn on two-factor authentication wherever offered.Log into CRA My Account and look for unauthorised filings or address changes.Review your credit reports for accounts that aren't yours.
What mistakes should I avoid with identity theft?
Don't sleep on it. Identity-theft losses compound by the day.Don't pay debts you didn't create. Dispute them in writing with both the creditor and the bureau.Don't throw out the paper trail — letters, statements, screenshots, voicemails. All of it is evidence.Don't assume it will sort itself out. Identity theft only ends when you actively close it.Don't ignore weird CRA mail. A reassessment you didn't expect can be the first sign someone filed in your name.
Identity Theft in other states
Same topic, different jurisdiction. Pick the one that applies to you.