Protecting your credit in B.C.: check your credit reports for free and add fraud alerts now, and get a free credit freeze from August 2027

1. First, a few terms: credit report, credit score, alert and freeze

Credit bureau (also called a credit reporting agency). A company that collects and organizes records of how each person borrows and repays money. Consumer Protection BC says two companies produce credit reports and credit scores in B.C.: Equifax and TransUnion. They are separate companies, each keeps its own report on you, and the two reports are not always the same.

Credit report. The "borrowing and repayment file" a credit bureau keeps on you. Consumer Protection BC lists what a report usually contains:

• Information that identifies you: name, address, employer and so on;
• Who you owe money to: the lenders' names, how much you owe and whether you pay on time each month;
• Debts sent to collection agencies, bankruptcies and court judgments;
• Who has looked at your report (inquiries).

Who looks at your report. Banks look at it when approving credit cards and loans. The Financial Consumer Agency of Canada (FCAC) says landlords renting out a home and some employers hiring staff may also look at it. Consumer Protection BC says no one can look at your report without your consent; when you apply for a loan, you usually give that consent in the fine print of the agreement.

Credit score. A number calculated from the information in your report that shows how likely you are to pay on time. FCAC says credit bureaus update scores at least once a month.

Checking your own report does not hurt your credit. FCAC states that checking your own credit report or credit score does not affect your credit.

Why the report matters more than the score. If a scammer borrows money in your name, your report will show an account you do not recognize, or an inquiry for something you never applied for. You can spot these at a glance in the report; your score may not change right away. So when you check, look first at the accounts and inquiries on your report.

Fraud alert. A statement and a phone number added to your credit report. It means: "My information may have been misused. If someone applies for credit in my name, please call this number to check with me first." In this guide, "fraud alert" is the general term. Equifax's own two kinds are called Identity Alert and Fraud Alert, and TransUnion's are called Potential Fraud Alert and Confirmed Fraud Alert (section 3 explains which one fits your situation). B.C.'s new law calls it a "security alert" (section 5 explains).

Credit freeze. You ask a credit bureau to temporarily stop giving your report to anyone who wants to enter into a contract with you such as a loan or credit card. If the bank cannot see your report, it usually will not approve the application, so the scammer cannot borrow the money. In B.C., this right only starts on August 1, 2027 (section 6 explains).

What is different now and after August 2027:

2. You can check your two credit reports for free right now

Online, both are free. FCAC states that you can check your credit report online for free from both Equifax and TransUnion. You can download and print it, and the information is updated once a month. TransUnion's free report is called "Consumer Disclosure."

• Equifax: go to the free report page on Equifax Canada's official website, click "Get Started," and sign up as prompted to view it. The Equifax page says your credit report and credit score are both free and updated once a month.
• TransUnion: go to the Consumer Disclosure page on TransUnion's official website. (TransUnion's website refused to let us read it, so we could not check how the page works; follow the official website.)

If you do not want to go online, you can ask by mail or by phone. FCAC says:

• By mail: fill in each bureau's own request form and send it with copies of two pieces of valid ID;
• By phone: call the credit bureau, answer a few questions to confirm your identity and follow the prompts. Equifax Canada: 1-800-465-7166; TransUnion Canada: 1-800-663-9980.

When you call, you can say: "I'd like to request a free copy of my credit report."

Credit score: for B.C. residents, only Equifax is free at the moment. FCAC states that Equifax's credit score is free in every province, while TransUnion's credit score is free only for people living in Quebec and Ontario (it is included in the Consumer Disclosure). So if you live in B.C., what you get free from TransUnion is your report, not your score. You can also ask for a free paper copy of your Equifax score by phone or by mail. FCAC also mentions that some federally regulated banks give you your credit score for free in their own apps.

The free version is enough; you do not need to pay just to "check your report." On the same page as Equifax's free report, Equifax also sells its paid Equifax Complete products (discounted trials, identity theft insurance and so on). If you only want to see your own report and score, choose the free one. Whether paid "credit monitoring" is worth buying is covered in section 9.

Watch out for fake "free credit check" websites. FCAC warns that scammers pretend to offer free credit reports or credit scores to get your personal and banking information. Before you give out any information, make sure the company is legitimate: read the terms of use and the privacy policy, and check whether it will sell your information to others. The web address should start with "https." The safest way is to go to the Equifax and TransUnion websites through the links on FCAC's page.

What to look at when you get your report. FCAC lists these things:

• Whether your personal information is wrong, such as your address or date of birth;
• Whether the records of your credit cards and loans are wrong;
• Whether your payment history is right, for example, you paid on time but it shows as late;
• Whether there are accounts you never opened. This may mean someone is using your identity;
• Whether negative information that is older than the period it is allowed to stay on your report is still there.

FCAC recommends checking both reports, regularly, so that you find problems early.

An example. You moved to Victoria in 2026 and have never borrowed money in Canada. You check your Equifax report and find a credit card opened in Toronto in September 2026 that you never applied for. This is a typical case of someone opening an account in your name. Follow the part of section 11 called "You find a loan or credit card on your report that you did not apply for."

Related: if you have just arrived in Canada and need to open a bank account and get your first credit card, see Your first 90 days in Canada: a to-do checklist.

3. Lost your ID, or your information may have leaked: you can add a "fraud alert" now

When to add one. FCAC says that in the following situations, you should ask Equifax and TransUnion to add a fraud alert (also called an identity alert) to your report:

• You suspect you have been scammed, or someone has stolen your identity;
• Your wallet, ID or phone has been stolen;
• Your home or car has been broken into.

FCAC says that once an alert is added, lenders are to contact you at the phone number on the alert to confirm it is really you before they approve an application. This can stop some applications made in your name. (In B.C., this step is not yet required by law; see below.) FCAC also warns that the credit bureau may ask you to show ID, and may charge a fee.

You must add them with each bureau separately. Equifax states that an alert added with Equifax only covers your Equifax report; you need to contact TransUnion separately.

Equifax's two kinds of alerts

In B.C., lenders are not yet legally required to act on these alerts. Equifax states that in Manitoba and Ontario, when there is an identity alert, lenders must call you first; elsewhere in Canada (including B.C.), lenders are only "encouraged" to call, and the law does not require it. The same goes for the fraud alert: Equifax states that it only encourages lenders to call, and this is not a legal requirement. So an alert added now cannot block every attempt. Only from August 1, 2027 will lenders be legally required to act on a "security alert" under B.C.'s new law (section 5).

How to add an Equifax alert:

• By phone: for an identity alert, you can call Equifax's automated phone line at 1-800-465-7166 and follow the prompts;
• Online: on the dispute page of the Equifax website, click "Start Electronic Dispute," then choose "Alerts," and the form will be sent to your email;
• By mail: download Equifax's "Credit Report Update Form | Alerts," fill it in and mail it with your documents to: Equifax Canada Co., National Consumer Relations, Box 190, Montreal, Quebec H1S 2Z2. The Equifax website currently shows a notice about a Canada Post service disruption. Check it before you mail anything, and if mail is not getting through, apply online or by phone instead.

Documents to include if you apply by mail (as stated on Equifax's form):

• Copies of the front and back of two pieces of valid government-issued ID that show your legal name, date of birth and/or current address, such as a driver's licence, passport or birth certificate;
• If neither piece of ID shows your current address, also include a proof of address dated within the last 90 days, such as a utility bill or bank statement;
• In the "Phone Number on Alert" box on the form, write the phone number you want on the alert. Only Canadian numbers are accepted.

To change the phone number on the alert later, you also need to apply in writing, with ID and a phone bill from the last 90 days that shows your current address and that phone number. When you copy a bank statement or credit card, Equifax reminds you to black out the three-digit security code (CVV) on the back of the card, and it is best to black out the transaction details too.

TransUnion's alerts

We tried three ways and could not open TransUnion's website. The points below come only from the summaries of TransUnion's website shown by search engines; we could not open the original pages. Follow TransUnion's official website:

• If your information may have been exposed but you have not found any misuse yet, you can add a "Potential Fraud Alert." It stays for 6 years unless you ask for it to be removed earlier. The summary says adding it online is free;
• If misuse has been confirmed, you can contact TransUnion online, by phone or in writing to add a "Confirmed Fraud Alert."

TransUnion Canada's phone number is 1-800-663-9980 (this number appears both on FCAC's page and on Equifax's form).

When you call, you can say:

"I may be at risk of identity theft. How can I add an alert to my credit file?"

Once it is added, write down the date and the confirmation number, and check that the phone number on the alert is correct. If you change your cellphone number, remember to update it with both bureaus.

Related: if your bank card has already been used for fraud and money has already been taken, see Guide No. 31, Card fraud and scam transfers.

4. From August 1, 2027: the free rights B.C.'s new law gives you

Where this law comes from. In October 2025, the B.C. government introduced Bill 28. Once passed, it is called the Business Practices and Consumer Protection Amendment Act (No. 2), 2025, and it received Royal Assent (that is, it formally became law) on December 3, 2025. It mainly amends two laws: the Business Practices and Consumer Protection Act and the Personal Information Protection Act.

When it takes effect. On July 17, 2026, the B.C. government made an Order in Council (No. 331/2026), registered as B.C. Regulation 126/2026 and published in the B.C. Gazette on July 28, 2026. It provides that sections 1 to 7, 10, 11 and 13 to 26 of the amending Act take effect on August 1, 2027, and it also brings in the related Credit Reporting and Credit Monitoring Regulation. Another regulation, B.C. Regulation 132/2026, sets the 45-day deadline for correcting errors, also from August 1, 2027.

Do not confuse this with the rules from August 2026. A B.C. government news release dated August 6, 2026 says a different set of rules already took effect on August 1, 2026: subscription services must give notice in advance before they renew automatically and must let you cancel the renewal at any time, and high-pressure door-to-door sales of expensive household products such as air conditioners and furnaces are banned. The credit protection rules have to wait until August 2027.

What the new law gives you (all free):

1. Security alert. You ask a credit bureau to add an alert and your phone number to your report. Before signing an agreement, a lender must first try to contact you, or verify your identity in person (section 5).
2. Credit freeze. You ask a credit bureau not to give your report to anyone who wants to enter into a credit agreement with you. When you need to borrow, you can suspend it, or you can cancel it (section 6).
3. A free report and credit score every month. When a credit bureau gives you your report, it must include your credit score (section 7).
4. A written answer to a correction request within 45 days (section 7).

The new law also sets new rules for the "credit monitoring" sold by credit bureaus and for "credit repair" companies (section 9).

Who can apply. The law says "an individual" can make the request to a credit bureau. You have to apply yourself; nothing is added automatically. The law does not say what documents are needed or whether people from other provinces can apply in B.C. The new law requires credit bureaus to publish these rights on their own websites. When the time comes, follow the procedures the two bureaus publish.

Not available yet (before August 2027). Until then, B.C. has no legal right to a freeze. The Equifax website states that its freeze (which it calls Credit Lock) is available only to residents of Quebec and Ontario. What you can do now is check your reports for free and add alerts, as described in sections 2 and 3.

5. Security alert (from August 2027): lenders must try to reach you before signing

How to apply. Under the amending Act and the related regulation, you can write to or call a credit bureau and ask it to include a security alert in every report it gives anyone about you. When you apply, you must give a phone number. Lenders will call this number to reach you, so give a number where you can actually be reached.

What the credit bureau must do. When it receives the request, it must verify your identity as soon as possible. After that, every report it gives about you must include three things:

• A statement that the alert was added at your request;
• A statement that section 107.1 of the Act may apply to the person receiving the report, with a summary of that section;
• The contact phone number you gave.

What lenders must do (section 107.1). After receiving a report with an alert, and before entering into a credit agreement with you:

• If you are not there in person, for example when you apply for a credit card online: the lender must make reasonable efforts to contact you at the phone number on the alert, and keep a record of those efforts;
• If you are there in person, for example at a bank counter or a car dealership: the lender must verify your identity and keep a record of how it did so.

A "credit agreement" here includes agreements to borrow money, such as loans and credit cards. The law states that it also includes leases.

Changing the phone number or cancelling later. This is also done in writing or by phone. Before changing the number or cancelling the alert, the credit bureau must verify your identity again.

Is there a fee? No. The law states that a credit bureau cannot charge a fee for anything it does under this section.

How long it lasts. The related regulation does not set a date when the alert automatically expires. The law also says that if an expiry period is set later, the credit bureau must tell you in writing, within 30 days after you apply, the date it expires; and at least 30 days before it expires, it must remind you again and tell you that you can apply again at any time.

An example. You lose your driver's licence and your bank card together. A scammer uses the information on your licence to apply online for a credit card in your name. The issuing bank checks your Equifax report, sees the security alert and your phone number, and must first call you. You answer and say, "I did not apply for this," and the card is not issued.

What a security alert cannot do. It only works when someone uses your report to enter into a new credit agreement. It cannot stop a scammer from using a bank card you already have, or from tricking you into transferring money yourself.

6. Credit freeze (from August 2027): lenders cannot see your report

How to apply. Under the amending Act and the related regulation, you write to or call a credit bureau and ask it not to give your report to anyone who asks for it "in order to enter into a credit agreement with you." The credit bureau must verify your identity as soon as possible.

Once the freeze is on. As long as the freeze is in effect, if someone asks for your report in order to enter into a credit agreement with you, the credit bureau must refuse, and must tell them why. If the bank cannot see your report, it usually cannot approve the application, so it becomes hard for a scammer to borrow money in your name.

What a freeze blocks and what it does not.

• What it blocks: when someone uses your name to apply for a new loan, credit card or lease, the lender cannot get your report. ("Lease" is the law's word; the law does not say whether a freeze blocks a landlord checking your report when you rent a home.)
• What it does not block: fraud on a bank card you already have, someone signing in to your online banking, being tricked into transferring money yourself, and your normal monthly payments. These have nothing to do with your report, so you still need to watch your statements and alerts yourself.
• The law only covers requests for your report "in order to enter into a credit agreement." For other purposes (for example, landlords or employers), the law does not say whether a freeze blocks them. Ask the credit bureau when the time comes.

When you need to borrow: suspend or cancel. When you yourself want to apply for a car loan, mortgage or credit card, you can write or call to ask the credit bureau to suspend the freeze for a period, stating the start and end dates. The related regulation states that the credit bureau must suspend it for the period you specify. If you no longer want it, you can also ask it to cancel the freeze. Before suspending or cancelling, the credit bureau must verify your identity again.

How long it takes to lift. The law only says the credit bureau must verify your identity "as soon as possible"; it does not set a number of hours or days to get it done. So if you plan to borrow, arrange the suspension a few days ahead and apply only after it is in place. Do not wait until you are at the car dealership or the bank to think of it.

Do it with both bureaus. Under the law, you apply to each credit bureau separately. You do not know which one a lender will check, so it is best to freeze and suspend with both.

Is there a fee? Setting up, suspending and cancelling are all free; the law states that no fee can be charged. As for how long it lasts, it is the same as the security alert: the regulation does not set an automatic expiry, and if an expiry period is set later, the credit bureau must tell you in writing in advance.

An example. In mid-October 2027, you want to get a car loan at a dealership in Langford. In early October, you call Equifax and TransUnion and ask them to suspend the freeze from October 13 to October 20, and ask exactly when it will take effect. Once the car loan is done and the suspension period ends, the freeze comes back on automatically.

Security alert or freeze: which to choose. The law does not say you can only choose one. You can think about it this way:

7. From August 2027: free checks every month, and an answer within 45 days if there is an error

A free report and credit score once a month. The amended Personal Information Protection Act provides that when you ask a credit bureau for your personal information (that is, your credit report), the credit bureau must tell you where the information came from and must also give you your credit score, in basically the same form it gives to lenders. The credit bureau cannot charge a fee; it may charge only if you ask again for the same information less than one month after your last request. (The "free once every 30 consecutive days" mentioned in section 9 is the wording in a different law, written for companies that sell credit monitoring and credit repair. The two laws are worded slightly differently, but the meaning is about the same.)

If there is an error in your report, you must get a written answer within 45 days. The amended Personal Information Protection Act and B.C. Regulation 132/2026 provide that when you ask a credit bureau to correct an error or omission in your report, the credit bureau must make every reasonable effort to check whether the information is accurate and complete, and must tell you the result in writing within 45 days after receiving your request:

• If it finds there are reasonable grounds, it must correct the information. After correcting it, it must send the corrected information as soon as possible to the organizations that received this information in the year before the correction;
• If it finds there are no reasonable grounds to correct it, it must add a note next to that information saying how you asked for it to be corrected.

An example. In September 2027, you find that your Equifax report shows a phone instalment plan you have already paid off as still owing. You write to ask for a correction and include proof that it was paid off. Equifax must answer you in writing within 45 days of receiving your request. If it corrects the record, it must also send the corrected information to the organizations that checked this record in the past year.

8. If you find an error in your report now: how to fix it

You can get errors fixed for free now (before August 2027). FCAC states that you have the right to dispute any information on your report that you think is wrong, and credit bureaus must correct errors for free. The steps FCAC gives are:

1. Gather your evidence. Keep receipts, statements, proof of payment and anything else that shows what is wrong. First print both reports and circle the lender, account, date and amount of each problem.
2. File a dispute using each bureau's own form. The credit bureau will check with the lender that reported the information. If, after checking, it agrees there is an error, it corrects it; if the lender insists the information is right, it stays on your report.
3. Contact the lender directly. FCAC says contacting the lender directly and asking it to check its records and send the corrected information to the credit bureaus may be faster.
4. If you are not satisfied, go higher. If you are not satisfied with the result, ask for the matter to be handled by someone more senior. Federally regulated banks must have a complaint process and must also give you access to an external complaints body.
5. Add a statement. If you are still not satisfied, you can add a short explanation to your report, called a "consumer statement," for free. Consumer Protection BC says that in B.C. you have the right to add a statement of up to 100 words in English; Equifax's form says up to 800 characters.

How to dispute with Equifax. Equifax states that you can do it online or by mail, for free. An online dispute takes about 15 to 20 days and a mailed one about 20 to 25 days. If you file online, you are told the result by email; if you file by mail, you are told by mail. You usually need copies of the front and back of two pieces of valid government-issued ID; if neither shows your current address, add a proof of address from the last 90 days. Also include account documents that show the error. Before you mail it, see the Canada Post notice mentioned in section 3.

Disputing with TransUnion. Use the dispute page on TransUnion's website. (TransUnion's website refused to let us read it, so we could not check the exact steps.)

A debt you have already paid is still on your report. The steps Consumer Protection BC gives:

1. Use its "Dispute of Alleged Debt" form to tell the original creditor and the collection agency that you dispute the debt. Send it in a way that gives you proof of delivery, such as email or registered mail, and keep a copy. Give the collection agency 3 to 5 business days to deal with it;
2. Tell the credit bureau that you are already dealing with the creditor;
3. If it is still not resolved after a reasonable time, use the credit bureau's dispute process, and explain what you have done and that the creditor has not removed it;
4. If that still does not work, complain to Consumer Protection BC.

A debt you really owe cannot be removed. Consumer Protection BC states that a debt you really owe cannot be removed from your report; what you can do is add a statement.

Where to complain.

• What can be in your report and who can see it: this is Consumer Protection BC's area, and you can file a complaint on its website. It states that it does not deal with how credit scores are calculated.
• Personal information in your report that should not be there, or other privacy issues: contact the credit bureau first; if that does not work, complain to the Office of the Information and Privacy Commissioner for British Columbia (OIPC).
• FCAC says the federal government does not regulate credit bureaus. If you are unhappy with a credit bureau, go to the credit bureau itself first, then to your province's consumer affairs office, which in B.C. is Consumer Protection BC.

An example. You pay your cellphone bill on time every month, but your TransUnion report shows one late payment. Save a screenshot of that month's payment record. First call your phone company and ask it to check and send the correct record to TransUnion; at the same time, file a dispute with TransUnion (follow its website for how to submit it) and include the screenshot. When it has been dealt with, check your report again to see whether it has been fixed.

If a collection agency calls: first ask whether the caller is the original creditor or a collection agency, check on the Consumer Protection BC website whether it is licensed, and ask it to send you the details of the debt in writing; if you do not accept the debt, tell both the collection agency and the original creditor in writing. The calls stopping does not mean the debt is gone. If you are asked to "just pay a little" on a debt from several years ago, do not rush: in B.C., paying part of a debt also counts as acknowledging it, and the time limit for suing you starts again. See sections 13 and 14 of Guide No. 49.

→ No. 49 · Checking and disputing your bills

9. Paid "credit monitoring" and "credit repair": look carefully before you pay

What credit monitoring is. FCAC says these services alert you when certain changes appear in your report and score, such as a new inquiry, which can help you find out early that your identity has been stolen. Credit bureaus and many card issuers and banks sell them, and they usually cost money; sometimes they are offered for free, for example when your information was exposed in a data breach. FCAC says people who suspect their identity has been stolen, have been scammed, or have had their information exposed may want to consider using one.

From August 2027: new rules for credit bureaus selling monitoring services. The amending Act provides that before a credit bureau signs you up for a monitoring contract, it must tell you that you have the right to ask it for your own information and credit score, free once every 30 consecutive days. If it did not tell you, you can give notice to cancel the contract within one year after signing; it must refund all the money it collected under the contract and related transactions, in full, within 15 days of the day you sent the cancellation notice. This rule covers monitoring services sold by credit bureaus themselves.

What credit repair is. Some companies charge money and claim they can help you "repair your credit," "remove bad records" or "guarantee a higher score."

From August 2027: new rules for credit repair companies (section 7 of the amending Act):

• Results first, payment after. A company can charge you only after its own work has actually led a credit bureau to correct an error or omission in your report, or has actually raised your credit score. It also cannot take a guarantee of payment in advance.
• Before signing, it must explain and have you initial each term. Before you sign, the company must explain and go through things with you, including: you can cancel for any reason within 10 days after you receive a copy of the contract; you can ask a credit bureau for your own information and credit score for free (once every 30 consecutive days); you can ask a credit bureau to correct errors yourself; the company cannot charge in advance; and the company cannot force a credit bureau to delete or change information. You must write your initials next to every term of the contract to confirm it.
• You can get your money back. Within 10 days after you receive a copy of the contract, you can give notice to cancel for any reason. If the company did not explain these things before signing, or did not have you initial every term of the contract, you can cancel within one year from the day you signed. After you cancel, the company must give you a full refund within 15 days of the day you sent the cancellation notice.
• These claims count as deception. Falsely claiming to have a credit repair licence; falsely claiming to be able to force a credit bureau to delete or change information; and claiming to be able to raise your score without having looked at your report and reasonably concluded that it really contains errors.

A debt you really owe cannot be removed, even if you pay. Consumer Protection BC states that a debt you really owe cannot be removed from your report. If your report really has an error, disputing it yourself as described in section 8 is free.

Two things to do before you pay. When you see an ad that says "guaranteed higher score," first check both reports yourself to see whether there really is an error; and whatever contract you sign, keep a copy of the contract, the cancellation notice and the proof of delivery.

Related: for what to ask when someone tries to sell you a financial product, see section 4 of Saving tax and investing: getting started.

10. How to recognize common scams

Scam 1: someone claiming to be your bank, a credit bureau or the police says "there is a problem with your account." The "bank investigator" scam described by the Canadian Anti-Fraud Centre (CAFC): you get an automated call saying it is your bank, the police, a credit bureau or Amazon, and that there are suspicious transactions on your account. Then they will:

• Ask you to let them remotely control your computer or phone, so they can "continue the investigation";
• Ask you to read out the verification code you received by text or email, saying it is to "verify your identity." In fact, this code is the multi-factor authentication code for your online banking, and once you give it to them, they can get into your account;
• Ask you to transfer money to a "safe account," or to move money to help with their "investigation";
• Say they will come to your home to pick up your bank card, or even tell you to cut the card in half without damaging the chip; they may also threaten that you will be arrested if you do not cooperate.

How CAFC says to recognize it:

• Caller ID can be faked. Even if it shows your bank's number, do not trust it;
• If you get a call from someone who says they are from your bank, tell them you will call back, then hang up and call the number on the back of your bank card. Use a different phone if you can; if not, wait 10 minutes before you call;
• Credit bureaus do not call you for no reason, unless you asked them to call you back. If you get a call like this, hang up, find the official number on the credit bureau's website and call back;
• Banks and police do not threaten you over the phone;
• Do not tell anyone the verification codes you receive by text or email;
• Scammers can often tell you the first 4 to 6 digits of your bank card. These digits only identify the bank that issued the card, and most cards from the same bank share them. Knowing them does not mean the caller is real;
• Do not let anyone remotely control your computer;
• Banks and online stores do not ask you to move money to an outside account for "security";
• Banks and police do not ask you to hand over your bank card, and do not come to your home to pick it up.

Scam 2: a text saying "your credit score has dropped," "click the link to activate a security alert" or "click here to unfreeze." This is text message phishing (smishing). The Competition Bureau says these texts often arrive suddenly from an unknown number, ask you to click a link or give personal information, push you to act right away, and pretend to be a bank or a company you know.

• Do not click the link and do not reply, not even "reply STOP to unsubscribe";
• Open the banking app or website you normally use yourself, or call the number on the back of your card, to check;
• Forward the text to 7726 (which spells SPAM on the keypad) so your phone company can look into it; you can also report it using the form on the federal anti-spam website;
• Take a screenshot and keep it, and report it to CAFC (section 11).

A reminder: in B.C., the credit freeze only starts on August 1, 2027. Before then, if you get a text like "click the link and we will unfreeze your credit" or "your freeze has expired," treat it all the more as a scam.

Scam 3: calls and texts claiming to be from the CRA. The Canada Revenue Agency (CRA) states that the CRA will never:

• Send you a refund or other payment by e-Transfer or text message;
• Accept or make payments in cryptocurrency;
• Demand immediate payment by Interac e-Transfer, cryptocurrency, prepaid credit card or gift cards from any store;
• Threaten to deport, arrest or jail you;
• Use aggressive or threatening language;
• Arrange to meet you in a public place to collect money;
• Charge you a fee before you can speak to an agent;
• Ask for personal or banking information in a voicemail or email.

But note: the CRA states that when it calls you, it may ask for your name, date of birth and social insurance number (SIN) to verify your identity. So "they asked for my SIN" cannot be used to tell whether a call is real. The safest way is the one the CRA itself teaches:

1. Whether the call is real or not, do not give any personal information on the phone at first;
2. Write down the caller's name, office name or location and a call-back number. Do not trust caller ID;
3. Tell the caller you will check first and call back, then hang up;
4. Use the "verify a phone number" tool on the CRA website to check the number, or call the CRA's phone line for individuals at 1-800-959-8281 to ask whether the CRA is trying to reach you.

If you get a call claiming to be from the CRA, you can say:

"I'll verify this with the CRA first. Can I have your name, your office and a callback number?"

Write it down and hang up, then check as in step 4 above.

If you suspect someone has tampered with your CRA account (your banking information or address has been changed, or someone has applied for benefits in your name), the CRA states that you can call 1-833-995-2336 (for individual accounts, Monday to Friday, 8 a.m. to 4 p.m. local time) and have protection added to your account right away during the call; you can also fill out the CRA's online form, and a CRA employee will contact you within 14 business days.

Scam 4: automated calls claiming to be the Beijing police or a Chinese consulate. CAFC has specifically warned about a type of automated call aimed at the Asian community, claiming to be the Beijing police, INTERPOL, a Chinese consulate or a courier company with an "urgent message." A common story is that customs has intercepted a package sent in your name containing many bank cards, and that you are involved and under investigation. Variations include asking you to visit a fake "police" website to verify your identity and send a copy of your passport, or saying there is criminal money in your account and asking for your banking information to "check" it. CAFC states that law enforcement agencies do not ask you for money and do not threaten to arrest you by phone or email; if you are not sure, find that agency's official phone number yourself and call to ask.

Scam 5: someone claiming to be from Immigration, Refugees and Citizenship Canada (IRCC) says your documents are not in order. CAFC describes it this way: scammers call saying they are from the immigration department, say you have immigration paperwork that is incomplete or not registered, and demand that you pay right away or be deported, have your passport revoked or lose your citizenship. CAFC lists these calls as scams. If you are not sure, hang up and find the contact information on the IRCC website yourself to check.

If someone promises to handle your immigration and guarantees approval, check their licence first. In Canada, the only people who can charge you to help with immigration or citizenship are licensed consultants of the College of Immigration and Citizenship Consultants (CICC), lawyers (and, in Ontario, licensed paralegals) and Quebec notaries. IRCC states that scammers promise to get your application approved faster, or to "fix" problems with your application; using a representative does not make an application faster or easier to approve in the first place. Before you pay, ask for their CICC number or law society membership number and look them up in the register yourself; for how to do this and which claims are warning signs, see sections 2 and 3 of Guide No. 59. If you have already given such a person your documents or money, for how to remove them and where to report them, see section 6.

→ No. 59 · Immigration consultants and the new penalties

Scam 6: after you have been scammed once, someone says they can help you "recover your losses." CAFC warns that scammers often go back to people who have already been scammed a second and third time, saying they can help get the money back if a fee is paid first. Do not pay any "recovery fee."

Do not give out your social insurance number (SIN) freely. Service Canada states:

• Do not give your SIN over the phone unless you made the call and you are sure the law requires it;
• You do not need to give your SIN to apply for a credit card, mortgage or line of credit, to rent a home, to get phone and Internet service, or to check your own credit report. If someone asks for your SIN when the law does not require it, you can refuse and show other ID instead, such as a driver's licence or passport;
• Be careful of calls, texts and emails that say "there is a problem with your SIN," "we can get you a new SIN" or "we need to lock or cancel your SIN."

When the law requires you to give your SIN (work, financial accounts and government services), how to say no when someone asks for it, and where to complain in B.C. depending on who asked; also, a scammer does not need your name and can pair your SIN with another name to create a fake identity and borrow money, so keep your child's SIN safe too: see sections 2 and 14 of Guide No. 50.

→ No. 50 · Protecting your SIN

Related: for how to find the real phone numbers of the CRA and other government departments and how to call them, see Government of Canada phone lines: how to find and call them; for more on avoiding scams and staying safe, see Staying safe and getting help.

Scams about "exchanging for new notes". On September 3, 2026, the Bank of Canada unveiled the new $20 note, which will only start to circulate gradually in late February 2027. The Bank of Canada has not asked anyone to exchange old $20 notes for new ones, its web pages do not give any deadline for exchanging money, and old $20 notes are still legal tender. If someone calls, sends you a message or comes to your door saying "old $20 notes are about to become worthless, give me your cash and I will exchange it for you" or "you have to pay in advance to reserve the first batch of new notes", stop first: do not pay, do not hand over cash, and call the Bank of Canada's toll-free number, 1-800-303-1282, to ask. See section 5 of Guide No. 47.

→ No. 47 · The new $20 bank note

11. Step by step, depending on what has happened

You only got a suspicious text or call and gave nothing away

• Take a screenshot and write down the number and the time; do not click any link and do not reply;
• Forward the text to 7726;
• Report it to CAFC. CAFC states that you can report whether you are a victim or have only seen a scam, and you can choose to stay anonymous. Online: reportcyberandfraud.canada.ca (this website is run jointly by the Royal Canadian Mounted Police (RCMP) and CAFC). By phone: 1-888-495-8501, Monday to Friday, 10 a.m. to 4:45 p.m. Eastern Time, closed on holidays. Since 2026, B.C. has stayed on Pacific Time (UTC-7) all year and no longer changes its clocks, while Toronto still does. So in B.C. time, from the first Sunday in November to the second Sunday in March it is 8 a.m. to 2:45 p.m., and the rest of the year it is 7 a.m. to 1:45 p.m.

You entered your password on a fake website, or told someone a verification code

• Contact your bank right away in a reliable way: call the number on the back of your bank card, or use the banking app you installed yourself. CAFC suggests using a different phone if you can. Tell the bank what information you gave out and when, and ask the bank to protect your account and check your transactions;
• Change the passwords of the affected accounts, and change the password anywhere else you used the same one;
• If money has already been taken, for how to trace it and how to ask the bank to pay you back, see Guide No. 31, Card fraud and scam transfers.

Your ID was lost or stolen: do these three things on the first day

1. Report it to the office that issued it and get a replacement. CAFC states that if your Canadian passport is lost or stolen, report it to the passport office and the local police, or to the nearest Canadian office abroad if you are outside Canada; for ID issued by the province, such as a driver's licence, birth certificate or health card, contact the province that issued it; if your immigration documents are lost or misused, contact the immigration department (IRCC); if you suspect someone has used your SIN, see Service Canada's SIN page. Service Canada states that you may be given a new number only if there is clear evidence that your SIN has been misused.
2. If it was stolen, or someone has already used it, report it to the police and get a file number. CAFC says that if your identity has been misused, report it to your local police and keep the file number for later; if you later find suspicious entries on your credit report, update that file.
3. Add a fraud alert with both credit bureaus. FCAC says that if your wallet, ID or phone is stolen, ask Equifax and TransUnion to add an alert (section 3).

CAFC also suggests: if you suspect someone has redirected your mail somewhere else, contact Canada Post; if your identity has been misused, also tell your service providers, such as your phone, electricity and gas companies.

If you suspect someone is using your SIN: we did not find any service on Service Canada's SIN pages that lets you check this in one go, so check three places yourself: your two credit reports, every T4 in CRA My Account, and the Records of Employment (ROEs) in MSCA. If you know someone is using it, ask the police to include your name and SIN (in full, or its last 3 digits) in the report, then call the right place depending on where the problem showed up: the CRA's identity theft line for individual accounts at 1-833-995-2336; 1-800-206-7218 if someone has applied for EI using your SIN; and Service Canada's SIN Program at 1-866-274-6627 if someone is working under your SIN. See sections 4 and 10 of Guide No. 50.

→ No. 50 · Protecting your SIN

You find a loan or credit card on your report that you did not apply for

The three steps FCAC gives:

1. Contact that lender (using the phone number on its official website, not a number in a text or email) and any other organizations affected, and tell them you suspect someone has used your name;
2. Contact both Equifax and TransUnion and add a fraud alert;
3. Report it to the national fraud reporting system (reportcyberandfraud.canada.ca).

In addition: report it to your local police and get a file number (CAFC); check both reports, and file a dispute with whichever one has errors (section 8).

You can say this to the lender:

"I did not apply for this loan. Please open a fraud investigation and give me a case number."

Keep the transaction records, the messages back and forth and the reference number each organization gives you.

How to find the police in Greater Victoria

If you are in danger or something is happening right now, call 911. If it is not urgent, report it afterward by calling the non-emergency line or reporting online:

VicPD's fraud page also says that if you are not sure whether something is a scam, you can call 250-995-7654 to ask; there is no shame in being scammed, and reporting it helps police stop the next victim.

For non-emergency numbers in other parts of Greater Victoria and in other B.C. cities, see Staying safe and getting help, section 10.

Related: if money has already been taken, for how to get it back and where to complain, see Guide No. 31, Card fraud and scam transfers; for what to do first after being scammed or having your personal information leaked, and local police non-emergency numbers, see Staying safe and getting help, sections 9 and 10.

12. Everyday protection

CAFC recommends:

• Be on guard whenever an unfamiliar email, text, phone call or letter asks for your personal or banking information;
• Check your credit reports and your bank and credit card statements regularly, and report anything that is wrong;
• Shred papers with personal or banking information before you throw them away;
• Collect your mail promptly to reduce the chance of it being stolen;
• When you move, tell the post office, and also tell your bank and your service providers.

A few more points from this guide:

• Both credit reports are free to check; look at the accounts and inquiries every so often;
• If you lose your ID or your phone is stolen, add a fraud alert the same day;
• After August 1, 2027, if you do not plan to borrow soon, consider a freeze;
• Never tell anyone a verification code, and never give anyone remote control of your devices;
• If you get a call you did not ask for, always hang up and call back on an official number you find yourself.

13. Checklist before you act

• You can do this today: go to the Equifax and TransUnion websites, get a free credit report from each, and look for accounts and inquiries you do not recognize;
• If your ID, wallet or phone is lost or stolen: report it to the office that issued it → if it was stolen or misused, or what you lost was a Canadian passport, report it to the police and get a file number → add a fraud alert with each of the two bureaus;
• If you get a suspicious text: do not click, do not reply, forward it to 7726 and report it to CAFC;
• If you get a call from someone claiming to be your bank, the CRA or the police: give no information, write down their name and a call-back number, hang up and check using an official number you find yourself;
• If there is an error in your report: gather your evidence, file a dispute with the bureau that has the error, and at the same time contact the lender that reported it;
• If you are thinking of buying "credit repair": check your reports yourself first. From August 2027, a company cannot charge before it gets results, and you can cancel for any reason within 10 days after you receive a copy of the contract;
• From August 1, 2027: for the strongest protection, apply for a freeze with both bureaus; if you need to borrow, arrange a suspension a few days ahead;
• If money has already been taken: see Guide No. 31, Card fraud and scam transfers.

Related guides

• → No. 31 · Card fraud and scam transfers
  If money has already been taken from your card or account: how to get it back and where to complain.
• → No. 20 · Staying safe and getting help
  What to do first after being scammed or having your personal information leaked, and police non-emergency numbers in B.C. (sections 9 and 10).
• → No. 7 · Phone directory
  How to find and call the real phone numbers of the CRA and other government departments.
• → No. 2 · First 90 days
  Just arrived in Canada? Open a bank account and get your first credit card in the order this guide gives.
• → No. 15 · Saving tax & investing
  What to ask when someone tries to sell you a financial product (section 4).
• → No. 45 · Online shopping problems and returns
  When an online purchase goes wrong: how to recognize a fake online store and what to do if you are scammed, and how to cancel under the law and ask your credit card company for a chargeback when goods do not arrive or a refund does not come.
• → No. 47 · The new $20 bank note
  Canada's new $20 note only starts to circulate in late February 2027, and old $20 notes can still be used without exchanging them; if someone uses "exchanging for new notes" to ask for your cash or for a payment to reserve new notes, stop and check with the Bank of Canada. Also: how to get your money back for old notes, and what to do if you receive a counterfeit note.
• → No. 49 · Checking and disputing your bills
  Handling calls from a collection agency: ask whether it is the creditor or an agency, check its licence and ask for written details; whether you still have to pay an old debt, and responding to a CRT Dispute Notice within 14 days.
• → No. 50 · Protecting your SIN
  Your SIN is not an identity document, so give it only when the law requires it; to find out whether someone is using it, check three places yourself: your credit reports, your CRA account and MSCA; who to call after the police once you know it is being misused; "synthetic identities" that do not need your name, and how to check your child's SIN.
• → No. 51 · Is zero-down rent-to-own real?
  Whether you can get a mortgage in a few years depends on your credit report: the last step of rent-to-own is usually still a mortgage from a bank, so ask a lender how much you could borrow now before you sign.
• → No. 56 · Buying, financing, leasing or renting a car
  Buying, financing or leasing a car: what documents some banks' and car brands' newcomer programs ask for and how much down payment they require when you do not yet have a Canadian credit history, and why formally submitting a credit application may involve a credit check; and comparing the total you will pay before you sign, not just the monthly payment.
• → No. 59 · Immigration consultants and the new penalties
  Check the licence before anyone handles your immigration: who can charge you for help, how to search the CICC and law society registers, which claims are warning signs, the penalties from October 2026 for representatives who charge without a licence or help clients falsify information, and how to remove a representative and where to report them if something goes wrong.
• → No. 61 · Canada Post Swap Spot
  Common scams when buying and selling used items online: fake e-Transfer emails and texts that steal your online banking password, overpaying and asking you to refund the difference, and scanning a QR code to "receive payment"; if you are scammed, call your bank first, then the police, then the Canadian Anti-Fraud Centre; and Canada Post's Swap Spot hand-overs at post offices, being trialled in some cities.

Main official links in this guide

These are the official pages used most in this guide. The text of the B.C. law and the two regulations, and the pages of the Province of B.C., FCAC, Consumer Protection BC, CAFC, the CRA, Service Canada, Innovation, Science and Economic Development Canada (ISED), the Competition Bureau and the four police services in Greater Victoria, were all opened and read on November 3, 2026; we also read three Equifax web pages and its alert form. There are three things we could not read: TransUnion's website blocked our access. Its phone number and the points FCAC states (the free report is called Consumer Disclosure; B.C. residents do not get a free score) were checked; what we say about its two alerts comes only from the summaries of its website shown by search engines, and how its online services and disputes work was not checked; the national fraud reporting website shows its form through scripts, so we did not check how to fill it in; and the B.C. Legislature's bill progress page could not be read either, so we matched Bill 28 to this amending Act using the B.C. government news release and the text of the law. Other links are at the end of each section.