From the Canada Revenue Agency Website:
Know how to recognize a scam
Examples of fraudulent communications
There are many fraud types, including new ones invented daily.
Taxpayers should be vigilant when they receive, either by telephone, mail, text message or email, a fraudulent communication that claims to be from the Canada Revenue Agency (CRA) requesting personal information such as a social insurance number, credit card number, bank account number, or passport number.
These scams may insist that this personal information is needed so that the taxpayer can receive a refund or a benefit payment. Cases of fraudulent communication could also involve threatening or coercive language to scare individuals into paying fictitious debt to the CRA. Other communications urge taxpayers to visit a fake CRA website where the taxpayer is then asked to verify their identity by entering personal information. These are scams and taxpayers should never respond to these fraudulent communications or click on any of the links provided
CLICK HERE FOR MORE INFORMATION http://www.cra-arc.gc.ca/scrty/frdprvntn/menu-eng.html