Identity Theft in Ontario
Reviewed by the Commoner Law Editorial Team. Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Identity theft is a criminal offence under Canada's Criminal Code, punishable by up to 5 years in prison. If someone steals your personal information and uses it without your consent, you have the right to take action.
Key steps to protect yourself:
- Contact the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501.
- Place a fraud alert with Equifax (1-800-465-7166) and TransUnion (1-800-663-9980).
- Credit freezes are currently only available in Quebec. Ontario is adding them in July 2026.
- Report to local police — you'll need a police report for many dispute processes.
When does it apply?
- Anyone whose personal information is stolen and used without consent.
- This includes fraudulent credit applications, bank accounts, government benefits claims, and tax fraud.
What to Do If Your Identity Is Stolen in Canada
- Contact the CAFC at 1-888-495-8501 to report the fraud.
- Call Equifax and TransUnion to place fraud alerts on your credit files.
- Report to local police and get a copy of the police report.
- Contact your bank and credit card companies to flag your accounts.
- Change all your passwords — especially email, banking, and government accounts.
- Check your CRA My Account for any fraudulent tax activity.
- Review your credit reports for any accounts you don't recognize.
What should you NOT do?
- Don't delay reporting — the longer you wait, the more damage the thief can do.
- Don't pay debts you didn't create — dispute them with the creditor and the credit bureaus.
- Don't throw away evidence of the fraud — keep all letters, statements, and records.
- Don't assume it will resolve itself — identity theft requires active steps to fix.
- Don't ignore suspicious CRA correspondence — it could be a sign someone filed taxes in your name.
How Ontario differs from federal law
Identity theft is a criminal offence under the federal Criminal Code, but Ontario provides additional consumer protection resources and a legal framework for victims.
- Under the Criminal Code, identity theft (obtaining and possessing identity information to commit a crime), identity fraud (using someone else's identity), and trafficking in identity information are all criminal offences carrying penalties up to 5 years in prison.
- Ontario's Consumer Protection Act, 2002 gives victims of identity theft rights to dispute unauthorized charges and transactions made in their name.
- Ontario's Consumer Reporting Act, R.S.O. 1990, c. C.33 gives you the right to access your credit report, dispute inaccuracies, and place a fraud alert on your file with credit reporting agencies (Equifax and TransUnion).
- The Canadian Anti-Fraud Centre (a federal-provincial-RCMP partnership) is the central reporting point for identity theft and fraud in Canada.
- Ontario's Information and Privacy Commissioner (IPC) can investigate complaints about organizations that failed to protect your personal information under the Personal Health Information Protection Act or the Freedom of Information and Protection of Privacy Act.
Additional Steps in Ontario
If you are a victim: (1) File a police report with your local police. (2) Contact Equifax (1-800-465-7166) and TransUnion (1-800-663-9980) to place fraud alerts and order your credit reports. (3) Report to the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre.ca. (4) Notify your bank and credit card companies. (5) File a complaint with the Ontario Ministry of Public and Business Service Delivery if a business was involved.
Relevant Law: Criminal Code, R.S.C. 1985, c. C-46, ss. 402–402.2 (Identity Theft and Fraud); Consumer Reporting Act, R.S.O. 1990, c. C.33; Consumer Protection Act, 2002, S.O. 2002, c. 30, Sched. A
Common Questions
When does identity theft apply?
Anyone whose personal information is stolen and used without consent.This includes fraudulent credit applications, bank accounts, government benefits claims, and tax fraud.
What should I do if someone stole my identity in Canada?
Contact the CAFC at 1-888-495-8501 to report the fraud.Call Equifax and TransUnion to place fraud alerts on your credit files.Report to local police and get a copy of the police report.Contact your bank and credit card companies to flag your accounts.Change all your passwords — especially email, banking, and government accounts.Check your CRA My Account for any fraudulent tax activity.Review your credit reports for any accounts you don't recognize.
What mistakes should I avoid with identity theft?
Don't delay reporting — the longer you wait, the more damage the thief can do.Don't pay debts you didn't create — dispute them with the creditor and the credit bureaus.Don't throw away evidence of the fraud — keep all letters, statements, and records.Don't assume it will resolve itself — identity theft requires active steps to fix.Don't ignore suspicious CRA correspondence — it could be a sign someone filed taxes in your name.
Legal Resources
We may earn a commission if you use these services — at no extra cost to you. This supports our mission to make legal information free for everyone.