The CRA says criminals send phishing emails and texts. They promise easy refund payments. The revenue service insists it only uses its secure online account for actual notices. Any extra message is a scam. Avoid clicking or hand over data. Instead, access your account to your online profile to verify. Payments for those who meet the rules start on the listed date. Remain careful with any sudden payment pitches.