Phishing Attack Warning for Internet Users

The Canadian Internet Registration Authority (CIRA) received reports of phishing scam e-mails designed to collect personal information including Canadian Social Insurance Numbers. The e-mails were made to appear to be coming from the Canada Revenue Agency, but with CIRA listed in the "from" address line.

This is a targeted phishing attack. CIRA is advising Internet users not to respond to these e-mails.

You can see a copy of e-mail below:

From: CIRA [mailto:Administrator@cra.arc.cg.ca]
Sent: Tuesday, July 28, 2009
Subject: Online Refund Form

Canada Revenue Agency
Online Refund Form

After the last annual calculation of your fiscal activity we have determined that you are eligible to receive a tax refund of 386.00.

Please submit the tax refund and allow us 3-9 days in order to process it.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

To access the form for your tax refund, please click here

What is Phishing?
Phishing is a practice of luring unsuspecting Internet users to a fake web site by using an authentic looking e-mail in an attempt to steal passwords, account information or other sensitive data.

About CIRA
The Canadian Internet Registration Authority (CIRA) is the not-for-profit, member-driven organization that manages Canada's dot-ca (.ca) domain name registry, develops and implements policies that support Canada's Internet community, and represents the dot-ca registry internationally. CIRA processes over 300 million requests per day to connect Internet users with over one million dot-ca Internet addresses.

For public inquiries, please contact:

Jennifer Austin
Senior Manager, Communications and Marketing
Phone: 613-237-5335 ext. 296
Email: jennifer.austin@cira.ca