Reporting Cybercrime to CAFC and Local Police — Canada
Sourced from Canadian federal statutes and official sources. Provincial information reflects each province's own legislation and court rulings. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Canada's cybercrime reporting structure is two-tier. Reports go to the Canadian Anti-Fraud Centre (CAFC) at antifraudcentre-centreantifraude.ca for national intelligence and pattern analysis. Investigation happens at the local-police level (RCMP for federal / non-municipal areas; municipal / provincial police where they have jurisdiction). For cybersecurity incidents (not consumer scams), Canadian Centre for Cyber Security (CCCS) handles national-level incident response.
When does it apply?
- Online fraud, account takeover, identity theft, sextortion.
- Investment / crypto scam.
- Phishing / impersonation of Canadian entities (CRA, banks, Canada Post).
- SIM-swap fraud.
Filing a Cybercrime Report in Canada
- Report to CAFC.
- For local follow-up, also file with your local police force.
- For CRA / IRS-style impersonation scams, report to CRA at canada.ca/cra-scam.
What should you NOT do?
- Don't expect a personal investigator for small cases.
- Don't pay 'recovery agents' upfront.
About Scams, Fraud & Money Recovery in Canada
Canada's scam-recovery system runs across three institutions. The Canadian Anti-Fraud Centre (CAFC) at antifraudcentre-centreantifraude.ca or 1-888-495-8501 is the central reporting hub — operated jointly by RCMP, Competition Bureau Canada, and the Ontario Provincial Police. Reports feed pattern intelligence and the Fraud Reporting System; local investigation by RCMP / provincial police / municipal police. For credit-card chargebacks, federal protection under the Bank Act + card-network rules. For bank disputes, the Ombudsman for Banking Services and Investments (OBSI) handles complaints free for consumers; OBSI award cap was raised to CAD 350,000 from 1 November 2021 (subject to OBSI Terms of Reference). The Financial Consumer Agency of Canada (FCAC) supervises federally-regulated banks on consumer protection.
Emergency: 911. CAFC: 1-888-495-8501.
Common Questions
What's the difference between CAFC and local police?
CAFC is national intelligence — receives all reports, builds pattern analysis, coordinates with banks / platforms / telcos. Local police (RCMP for federal-jurisdiction areas; provincial / municipal where they have responsibility) conduct investigation. Most cybercrime reports start at CAFC and route to local police for action where appropriate.
What is the reporting cybercrime to cafc and local police right in Canada?
Canada's cybercrime reporting structure is two-tier. Reports go to the Canadian Anti-Fraud Centre (CAFC) at antifraudcentre-centreantifraude.ca for national intelligence and pattern analysis. Investigation happens at the local-police level (RCMP for federal / non-municipal areas; municipal / provincial police where they have jurisdiction). For cybersecurity incidents (not consumer scams), Canadian Centre for Cyber Security (CCCS) handles national-level incident response.
When does reporting cybercrime to cafc and local police apply?
Online fraud, account takeover, identity theft, sextortion.Investment / crypto scam.Phishing / impersonation of Canadian entities (CRA, banks, Canada Post).SIM-swap fraud.
How do I report a cybercrime in Canada?
Report to CAFC.For local follow-up, also file with your local police force.For CRA / IRS-style impersonation scams, report to CRA at canada.ca/cra-scam.
What mistakes should I avoid with reporting cybercrime to cafc and local police?
Don't expect a personal investigator for small cases.Don't pay 'recovery agents' upfront.