SIN fraud and data breaches

Contact Canada's 2 major credit bureaus (TransUnion Canada and Equifax Canada) and request a copy of your credit report (there may be a fee). Review your reports to identify :

• accounts that you did not open
• credit inquiries you did not initiate

Consider adding a fraud alert to your file (there may be a fee). This will instruct creditors to contact you before opening new accounts in your name.

Examine your banking and credit card statements to identify any unusual or unauthorized activity.

Look out for suspicious incidents such as:

• opened envelopes
• missing financial statements you were expecting

You do not need to inform the SIN Program if:

• you suspect someone is using your SIN fraudulently
• you find out that your SIN was part of a data breach

The SIN Program cannot issue a new SIN without proof that your SIN was used to commit fraud.

• Get a case reference number and the officer's name and telephone number.
• The report must include your name and SIN (your full SIN or last 3 digits of your SIN).
• Ask for a copy of the report.

• Report the fraud via their website or call 1-888-495-8501.
• They can provide further guidance on identity theft.

• Contact Canada's 2 major credit bureaux (TransUnion Canada and Equifax Canada).
• If you have not already done so, add a fraud alert to your file (there may be a fee). This will instruct creditors to contact you before opening new accounts in your name.

If your credit report reveals unauthorized or suspicious activity, contact each creditor to report the identity theft. Request that they close any accounts you did not open and decline any new accounts you did not request.

If your credit reports revealed unauthorized or suspicious activity, inform your financial institutions.

If you noticed suspicious activity with your mail delivery, report the problem to Canada Post.

If your SIN has been used fraudulently to obtain money from the government, you must report the fraud directly to the affected program (for example, the Employment Insurance Program) to stop fraudulent payments.

• All required identity documents including:
  • a valid primary identity document
  • a valid secondary document
  • a valid supporting document (if applicable)
• a police report. You may provide:
  • a police case reference number
  • the report you filed with the police, or
  • a letter from the police confirming SIN fraud if an investigation was made
• a letter from a creditor confirming the fraudulent use of your SIN. The letter must:
  • include your name and your SIN (or last 3 digits of your SIN)
  • state that you are not responsible for any fraudulent purchases made using your information

  If the creditor's letter does not include your SIN:

  • provide a copy of the credit application filled by the impostor. The application must show your name and SIN (or last 3 digits of your SIN)
  • the information on the creditor's letter must be linked to the credit application

• All required identity documents including:
  • a valid primary identity document
  • a valid secondary document
  • a valid supporting document (if applicable)
• a police report. You may provide:
  • a police case reference number
  • the report you filed with the police, or
  • a letter from the police confirming SIN fraud if an investigation was made
• a printout of all employers who issued T4 slips for your SIN over the past 3 years (available from CRA at 1-800-959-8281). Review this list and identify employers for whom you have not worked. Service Canada will contact them on your behalf
• a clear photograph of yourself. Service Canada will share this picture with the identified employers to verify whether you have worked for them
• a list of your addresses for the past 10 years

If you have been issued a new SIN, there are important responsibilities you must manage for both your new and old SIN. Service Canada can only share your new SIN with federal departments and agencies that need it. Service Canada cannot correct credit files or protect your new SIN from misuse.

Your responsibilities with your new SIN

• You must notify relevant parties (for example, banks, creditors, employers, pension providers) of your new SIN so they can update their records
• If you don't update your SIN correctly, you may not receive benefits and could be at risk of fraud or identity theft

Your responsibilities with your old SIN

• You remain responsible for your old SIN
• If someone uses your old SIN fraudulently and a business doesn't check your credit, you could be liable for the impostor's debts
• If fraud occurs, you must prove you were not involved in the misuse of your old SIN