Your Cybersecurity Checklist For Tax Season

It’s tax time and the deadlines are fast approaching. If you’re in Canada, April 30th is the date to keep in mind, in the US, it’s April 15th. Tax season used to mean mountains of paperwork but more and more people are taking advantage of online software to file. Unfortunately, this opens the door to digital threats you need to be aware of. We’ve put together a guide to keep you safe this tax season.

First, What To Look Out For

With W2s and T4s flying around there’s a trove of personal data that cyber criminals look for to steal your identity and financial information.

1. Tax Fraud

Did you know, according to the Federal Trade Commission, one of the most common types of identity theft is tax-related fraud? This is when someone uses your Social Security number and other personal information to file an income tax return. You might not know it happened until:

  • You get a letter informing you of a suspicious tax return with your SSN or SIN (FixMeTip click here to learn “What to expect when the Canada Revenue Agency contacts you” or here if you’re in the US)
  • You try to file your return online but get a notice saying a return has already being filed with your SSN or SIN

2. Phishing Scams

If someone contacts you out of the blue claiming to be the IRS or CRA – be sure to stop and think before you give any personal information. Fraudsters will demand immediate payment to employ a sense of urgency. They know people are more likely to make irrational choices under pressure. Remember:

  • IRS and CRA will never contact you via text message, WhatsApp, or Facebook Messenger
  • They will never call to set up a meeting with you in public to take payment or demand immediate payment by e-transfer, bitcoin, prepaid credit cards or gift cards
  • If they use aggressive language or threaten you with arrest it is definitely a scam
  • One reader also mentioned to watch if they use your name. If they don’t ever address you by your name, you can assume it’s a scam.

Even if you get an email that has the correct logo and name make sure the email address looks correct and watch for spelling and grammar errors! You can always call the correct agency to verify any communication you receive.

3. Fake Software

Not only are scammers impersonating federal agencies they also pretend to be tax software, like TurboTax or UFile. You might receive an email from this software informing you that you need to reset your password due to suspicious activity on your account. You’re taken to a fake website where you update your information and unknowingly give cyber criminals access to all your personal data.

Next, steps to take before you file your taxes

Check out what tips our in-house tax experts shared with us for how to stay safe and secure this tax season.

Fez and Bryan, from our Accounting Team

Make sure the computer you’re using is clean

If your computer is infected your information is compromised before you even submit it. Use a trusted antivirus to protect what matters most and run FixMeStick for an added layer of security and peace-of-mind.

Our accounting team uses McAfee antivirus because they want a name they can trust to get the identity and privacy protection they need. Although free software seems good enough, it doesn’t offer the same level of protection and customer support as paid antiviruses. Try McAfee with a special discount today.

You want your computer to be up-to-date too

We know updating your operating system can be a pain but this is the only way to ensure it’s optimized against vulnerabilities. Your OS needs to be running its best to detect and avoid malware.

Tax tips for when you file

The device you’re going to be using is secure, now it’s time to actually file your return safely, securely, and efficiently.

Use a secure connection

If you can avoid it, try not to file your taxes on a public Wi-Fi network. Public Wi-Fi allows others to see your online activity.

FixMeTip: use a VPN to create a hack-proof, encrypted tunnel for your online traffic. Try NordVPN for only $2.99/month.

Also double check that any sites you’re using have Secure Sockets Layer (SSL). Check to make sure the URLs have https:// (not just http), and a lock icon at the front of the url address.

Use a strong, unique password

Whether you’re creating a new account this year, or using an account that you used last year it’s best to update your passwords.

It’s tempting to use easy, memorable items like your dog’s name or your SIN– but don’t! With the record number of online breaches in 2018 it’s mandatory to use unique, complex passwords for every account.

Better yet, use 2 Factor Authentication (2FA) to ensure only you have access to your accounts.

You login with your password like regular. Then you’re also sent a code to your phone and have to input that to verify it’s really you trying to login. 

Backup your information

Filing taxes can be a huge endeavor that takes several weeks depending on your situation. Don’t let all this effort go down the drain, back it up on an external hard drive or in the cloud:

  • If you want cloud storage try SOS Online Back Up – it’s a smart and easy way to protect your files
  • If you prefer an external hard drive to keep your files protected that’s also an option

Have any questions about how to safely file your taxes? Comment below.


  1. Joan Smith - Reply

    NOBODY, the BBB, police or you, seem to suggest the obvious “check” on whether it’s a scam. They DON”T address you by your name!!! I had numerous phone calls left on my phone, and finally was home and answered one. I knew it was a scam, but purposely asked “is it my taxes or my husband’s you’re talking about?” and the phone message went on and on and was obviously a scam! If you were visiting me and I asked you to answer the phone, they’d accuse YOU of owing!! Emails come to my email address “name” which is NOT my name. So PLEASE include a statement “We will always address you by name and confirm with some unique detail that CRA knows who it is talking to/emailing, etc.”

  2. Les Blenkhorn - Reply

    Good advice, but if you owe Revenue Canada for back taxes, they will try to contact you by snail mail first, email if you have set up an account with Service Canada, or by phone as a last resort. That will be Collections Canada and they will tell you to contact the CRA at their 800 number to set up a payment plan.

  3. Jose Rivera - Reply

    My fix me stick does not work. canI get help? My computer says theres malwear . I need to know what to do. Is mt fix me stick up to date? Joe

  4. Vivian - Reply

    I have had FixMeStick for several years now. I don’t know what I’d do without it. It has been such a blessing. Thank you FixMeStick.

  5. Anonymous - Reply

    I used your fixmestick How do I know it worked? What should I expect?

    • Keegan Anfield - Reply

      Hey there, the scan will take a few hours. At the end of the scan, you’ll see Step 6 which will tell you if your computer is clean or not, then you’ll click “Exit FixMeStick”.Feel free to send us an email to if you have any additional questions.

  6. Christine - Reply

    I enjoy my fixmestick, but it won’t work on my new computer. Keep up the good works.

Leave Comment

Your email address will not be published.