The Canada Revenue Agency (CRA) has become aware of a new phishing scam targeting the tax preparation community, where bad actors are prompting EFILERs to log into a fake EFILE Sign in page to “activate” their account. Note that the CRA will never send you a link asking you to provide financial or personal information.
Protect yourself from spoofing by never clicking links received via text message or email. When visiting a website, always verify the URL and domain to make sure you are on the official website. Only log into your accounts from trusted sources.
If you believe that your EFILE ID and password have been compromised as result of this or other scams, contact the EFILE Helpdesk immediately. Please note that failure to notify the CRA of the potential compromise of EFILE credentials will result in suspension of your EFILE privileges.
Click here to learn more: here
Information source from Canada Revenue Agency (CRA)