Identity Theft in Quebec
Reviewed by the Commoner Law Editorial Team. Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Identity theft is a criminal offence under Canada's Criminal Code, punishable by up to 5 years in prison. If someone steals your personal information and uses it without your consent, you have the right to take action.
Key steps to protect yourself:
- Contact the Canadian Anti-Fraud Centre (CAFC) at 1-888-495-8501.
- Place a fraud alert with Equifax (1-800-465-7166) and TransUnion (1-800-663-9980).
- Credit freezes are currently only available in Quebec. Ontario is adding them in July 2026.
- Report to local police — you'll need a police report for many dispute processes.
When does it apply?
- Anyone whose personal information is stolen and used without consent.
- This includes fraudulent credit applications, bank accounts, government benefits claims, and tax fraud.
What to Do If Your Identity Is Stolen in Canada
- Contact the CAFC at 1-888-495-8501 to report the fraud.
- Call Equifax and TransUnion to place fraud alerts on your credit files.
- Report to local police and get a copy of the police report.
- Contact your bank and credit card companies to flag your accounts.
- Change all your passwords — especially email, banking, and government accounts.
- Check your CRA My Account for any fraudulent tax activity.
- Review your credit reports for any accounts you don't recognize.
What should you NOT do?
- Don't delay reporting — the longer you wait, the more damage the thief can do.
- Don't pay debts you didn't create — dispute them with the creditor and the credit bureaus.
- Don't throw away evidence of the fraud — keep all letters, statements, and records.
- Don't assume it will resolve itself — identity theft requires active steps to fix.
- Don't ignore suspicious CRA correspondence — it could be a sign someone filed taxes in your name.
How Quebec differs from federal law
Identity theft and fraud are Criminal Code offences (federal), but Quebec has additional provincial protections through the Act respecting the protection of personal information in the private sector and the Consumer Protection Act.
- Quebec enacted Act 25 (an Act to modernize legislative provisions as regards the protection of personal information), which significantly strengthened privacy protections starting September 2023. Businesses must now report confidentiality incidents (data breaches) to the Commission d'acces a l'information (CAI) and to affected individuals.
- You have the right to place a security alert on your credit file with Equifax and TransUnion, which requires creditors to verify your identity before extending new credit in your name.
- Quebec's Consumer Protection Act prohibits businesses from requiring your Social Insurance Number as a condition of doing business unless they are legally required to collect it. This limits unnecessary collection of sensitive information.
- The CAI (Commission d'acces a l'information) is Quebec's privacy regulator for both the public and private sectors. You can file a complaint with the CAI if a business mishandled your personal information leading to identity theft.
- Quebec residents can request that businesses that no longer need their personal information destroy it (de-indexation), which is an enhanced right under the modernized privacy law.
Additional Steps in Quebec
If you are a victim of identity theft: (1) File a police report with your local police. (2) Contact Equifax (1-800-465-7166) and TransUnion (1-877-713-3393) to place fraud alerts and obtain your credit reports. (3) Report the fraud to the Canadian Anti-Fraud Centre at 1-888-495-8501. (4) File a complaint with the CAI if a business's data breach caused the theft. (5) Contact creditors to dispute fraudulent accounts.
Relevant Law: Criminal Code (RSC 1985, c C-46), ss. 402-403; Act respecting the protection of personal information in the private sector (CQLR c P-39.1); Consumer Protection Act (CQLR c P-40.1); Act respecting Access to documents held by public bodies (CQLR c A-2.1)
Common Questions
When does identity theft apply?
Anyone whose personal information is stolen and used without consent.This includes fraudulent credit applications, bank accounts, government benefits claims, and tax fraud.
What should I do if someone stole my identity in Canada?
Contact the CAFC at 1-888-495-8501 to report the fraud.Call Equifax and TransUnion to place fraud alerts on your credit files.Report to local police and get a copy of the police report.Contact your bank and credit card companies to flag your accounts.Change all your passwords — especially email, banking, and government accounts.Check your CRA My Account for any fraudulent tax activity.Review your credit reports for any accounts you don't recognize.
What mistakes should I avoid with identity theft?
Don't delay reporting — the longer you wait, the more damage the thief can do.Don't pay debts you didn't create — dispute them with the creditor and the credit bureaus.Don't throw away evidence of the fraud — keep all letters, statements, and records.Don't assume it will resolve itself — identity theft requires active steps to fix.Don't ignore suspicious CRA correspondence — it could be a sign someone filed taxes in your name.
Legal Resources
We may earn a commission if you use these services — at no extra cost to you. This supports our mission to make legal information free for everyone.