Service Canada SIN scam in 2026: "your SIN has been suspended" is a lie, every time

What Service Canada actually does, and does not do

The Social Insurance Number is a nine-digit identifier issued by Service Canada under the authority of Employment and Social Development Canada (ESDC) to administer Employment Insurance, the Canada Pension Plan, Old Age Security, and a small number of other federal programs. It is not a general-purpose ID card and it is not a credit identifier. Contrary to what every scam call insists, it cannot be "suspended" by a phone agent because of "suspicious activity."

Service Canada has been explicit about this on its public scam-warning page at canada.ca/en/employment-social-development/services/sin and in joint advisories with the Canadian Anti-Fraud Centre. The agency will never call to ask for your SIN, threaten arrest or deportation, demand gift cards or cryptocurrency, or transfer you to a "police officer," "RCMP officer," or "border services officer." A real SIN issue is handled in person, by mail, or through your secure My Service Canada Account. Service Canada is not a law-enforcement body, so it does not issue warrants.

How the SIN suspension call actually runs

The script has stayed stable across 2024, 2025, and into 2026 because it works. CAFC complaint data and recordings shared in RCMP advisories let us reconstruct it almost line by line.

Step 1: the robocall

Your phone rings. The caller ID often shows a Canadian number, sometimes spoofed to match a real Service Canada or RCMP regional line. The call answers as a recording in clear English, occasionally re-recorded with a slight French-Canadian accent for Quebec.

"This is an important message from Service Canada. Your Social Insurance Number has been compromised due to suspicious activity in the province of Ontario. To avoid suspension of your benefits and to prevent legal action being initiated against you, press 1 now to speak to an officer. Failure to respond will result in cancellation of your SIN and a warrant being issued in your name."

Bilingual variants run the same warning in French, Mandarin, or Punjabi for cities with large newcomer populations.

Step 2: the "officer" transfer

If you press 1, the line connects to a live caller who introduces themselves with a Canadian-sounding name, a fake badge number, and sometimes a fake file reference such as "case number SC-2026-44871." Background sound is staged to mimic a call centre. The "officer" speaks calmly and is not in a hurry. They claim to be from Service Canada, the RCMP financial crimes unit, or the Canada Border Services Agency.

Their opening line is verification. "Before I can discuss this matter I need to confirm I am speaking with the correct person. Can you confirm your full name, date of birth, and your nine-digit Social Insurance Number?" Some scripts ask for your driver's licence number, your address, and the last four digits of your bank account. Polite victims usually answer because the call already feels official. At this point the scammers have your full identity, and the rest of the call is theatre designed to extract money or to keep you on the line so you do not call a real number to verify.

Step 3: the threat escalation

Once the "officer" has the SIN, the call pivots. "Mr. Singh, your SIN has been used to open six fraudulent accounts in Toronto. One of them is linked to a money-laundering investigation. A warrant has been issued in your name. The good news is that we can clear this matter today, but we have to act in the next thirty minutes before the file is transferred to the RCMP."

The "good news" is always the same: pay a fine, move your money to a "secure government holding account," or buy gift cards (Apple, Steam, Google Play, or Bitcoin vouchers from a Shoppers Drug Mart) to "indemnify" yourself. Recent 2026 variants ask the victim to install a remote-access app such as AnyDesk or TeamViewer so the "officer" can "guide you through securing your online banking." The remote-access install is the most damaging step because it gives the scammer direct access to log in to your bank from your own machine, defeating two-factor authentication.

Step 4: the lookalike domain handoff

If the victim hesitates, the scammer sends them to a website to "verify the official notice." The domain is built to look like Service Canada or the Government of Canada and rotates every few weeks. Active examples from CAFC and open-source reporting in 2026 include:

• service-canada-sin[.]ca
• sin-canada[.]online
• servicecanada-verify[.]ca
• canada-sin-update[.]com
• gc-ca-sin[.]net
• my-sin-account[.]ca

None of these are Service Canada. Every real Service Canada portal lives under the canada.ca top-level domain. The federal government does not run any service from a hyphenated .online, .net, or hyphen-stacked .com URL. If the page does not start with https://www.canada.ca, it is not Service Canada. The lookalike pages typically reproduce the Government of Canada wordmark, the red Canada banner, and a clone of the My Service Canada Account login. The form fields harvest the SIN, full name, date of birth, address, and a banking section labelled "for refund deposit." That data feeds into Canada Revenue Agency benefit fraud, Employment Insurance fraud, synthetic identity fraud, and SIM-swap attacks on Canadian mobile carriers.

Who is being targeted and why

The CAFC's 2024 annual report and RCMP regional briefings throughout 2024 and 2025 single out three groups as the heaviest targets for SIN impersonation fraud. None of these groups are "naive." They are all targeted because their lived experience makes the call sound plausible in ways it does not sound plausible to people with a long-established Canadian credit and tax history.

Newcomers and international students

If you arrived in Canada in the last few years, your relationship with Service Canada is still new. You may have collected your SIN in person within the first weeks of landing and may not yet have the full mental map of which Canadian agencies do what. Settlement.org, the largest newcomer information service in Ontario, lists the SIN suspension scam at the top of its fraud awareness guidance because the call lands on people who genuinely do not know that Service Canada cannot suspend a SIN. The fear of losing legal status compounds the panic. International students on a study permit are doubly exposed because the SIN call is often paired with the parallel "CBSA deportation" scam run by the same crews.

Seniors

The Office of the Privacy Commissioner of Canada (OPC) and provincial seniors advocates have documented seniors as the demographic most likely to lose the largest dollar amounts to this fraud. A senior on a fixed pension, who recognizes Service Canada as the agency that pays Old Age Security and the Guaranteed Income Supplement, hears "your benefits will be cancelled" and reacts. Many seniors targeted in 2024 reported losses above $10,000, with one Ontario case reaching $400,000 according to RCMP press releases.

People with limited English or French

The scam crews run bilingual call centres targeting Canadians whose first language is Mandarin, Cantonese, Punjabi, Hindi, Tagalog, Arabic, or Spanish. The crews invest in multilingual scripts because financial institutions and government agencies do not always match that language in their own callbacks, which makes verification harder for the victim.

Common templates running in 2026

The same crews recycle the script across CRA and immigration framings.

• SIN suspension. "Your Social Insurance Number has been suspended due to suspicious activity. Press 1."
• CRA tax debt + SIN combo. "The Canada Revenue Agency has filed a lawsuit in your name and your SIN is linked to the case." Pairs SIN extraction with the parallel CRA refund and tax debt scam.
• CBSA deportation threat. "Canada Border Services has flagged your immigration file. Press 1 before deportation proceedings begin." Almost always asks for SIN as "verification."
• Service Canada benefit re-enrolment email. Phishing email asking newcomers and seniors to "re-verify" their direct deposit information, linking to a lookalike domain.
• Fake "officer" callback. A live caller follows up a day after a missed robocall, citing a fake case file.
• SMS variant. "Service Canada: your SIN application has been suspended. Click to restore: sin-canada[.]online/restore." Mobile-first delivery has been growing through 2025 and 2026.

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

• Layer 1 - Local detection: 60+ URL patterns plus a 550+ brand-database that already covers Service Canada, the Government of Canada wordmark, Canada Revenue Agency, and CBSA. Hyphenated and TLD-swapped lookalikes such as service-canada-sin[.]ca, sin-canada[.]online, and canada-sin-update[.]com trip the brand-impersonation rule because the legitimate brand only operates under canada.ca. The community blacklist also picks up freshly reported phishing pages within hours of CAFC alerts. Everything in this layer runs directly inside the extension, before the page renders.
• Layer 2 - API checks: aggregates Google Safe Browsing, PhishTank, URLhaus, ScamAdviser, and 30+ scam TLDs to catch known-bad Service Canada and CRA lookalikes the moment they are reported. New campaigns reported to CAFC or PhishTank propagate to this layer within minutes.
• Layer 3 - AI deep scan (Premium): 100+ language content analysis. Catches novel Service Canada and CRA lookalike pages that do not match any existing signature, including freshly registered domains, by reading the page content and recognizing the impersonation pattern in English, French, Mandarin, Punjabi, or any of the other languages used to target newcomers in Canada.

Detection signatures come from threat-intelligence research and brand database analysis, not from user browsing data. Per-user URL history is never stored.

What to do if you already gave away your SIN

If you pressed 1, spoke to the "officer," and shared your SIN, banking details, or installed remote-access software, the next 24 hours matter more than anything else. Service Canada and the Office of the Privacy Commissioner of Canada both publish step-by-step recovery guidance. The compact version follows.

Within the first hour

1. Hang up. Do not call back the number that called you. If you are still on the line, end the call now. The callback number the scammer gave you is their line.
2. Disconnect from the internet if you installed remote-access software. If the "officer" had you install AnyDesk, TeamViewer, UltraViewer, or any similar tool, turn off Wi-Fi and unplug Ethernet immediately, then uninstall the software. If you logged in to online banking while they were watching, assume the credentials are compromised.
3. Call your bank from the number on the back of your debit card. Report the call, freeze any cards used during the conversation, and ask the fraud team to flag the account.

Within the first 24 hours

1. Call Service Canada at 1-800-206-7218 (option 3 for SIN). This is the real SIN fraud line published at canada.ca/en/employment-social-development/services/sin. Service Canada will open a file and assess whether a replacement SIN is warranted. A new SIN is not automatic and does not erase the old one from credit files; the OPC publishes this same guidance.
2. Report to the Canadian Anti-Fraud Centre at 1-888-495-8501 or online at antifraudcentre-centreantifraude.ca. Every report feeds RCMP investigative priorities and is the foundation for any insurance or bank-side recovery if you lost money.
3. Place a free fraud alert with Equifax Canada (1-800-465-7166) and TransUnion Canada (1-800-663-9980). The alert forces creditors to verify your identity by phone before opening any new account in your name. It is free, valid for six years, and renewable.
4. Check your CRA My Account. Log in directly at canada.ca/cra-login (never through a link in email or SMS). Look for direct-deposit changes, refund redirections, or address updates. If anything is altered, call the CRA at 1-800-959-8281.
5. Change your important passwords from a clean device. Start with email, bank, CRA, and My Service Canada Account. If a device was remote-accessed, reset passwords from a different machine entirely.

Within the first week

1. Pull your full credit reports. Equifax Canada and TransUnion Canada provide one free consumer disclosure per year. Look line by line for accounts you did not open and dispute every inaccurate entry in writing with each bureau.
2. File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca if a private-sector entity mishandled your data during the scam.
3. File a local police report. If you lost money, the police file number is often required by banks, insurers, and the credit bureaus to escalate disputes.
4. Tell your family and your settlement agency. The same crews call within the same household and within the same newcomer community. One conversation prevents the next call from landing.

The protection guide: hang up, look up, call back

Defeating this scam costs nothing and works against every variant. Three rules.

1. Hang up on any automated call claiming to be Service Canada, the CRA, the RCMP, or CBSA. No federal Canadian agency uses press-1 robocalls to discuss your file. Pressing 1 confirms your line is live and adds you to a higher-value list even if you hang up right after.
2. Look up the real number yourself. Open canada.ca in a fresh tab. Service Canada SIN: 1-800-206-7218. CRA individuals: 1-800-959-8281. RCMP non-emergency: your local detachment at rcmp-grc.gc.ca. CBSA: 1-800-461-9999.
3. Call that number. If something is really on your file, the real agent can see it. If there is nothing, you have confirmed the original call was a scam.

For the web side, install SafeBrowz. It is free for Chrome, Firefox, and Edge, covers Service Canada and CRA in its brand database, and flags any page that imitates the Government of Canada wordmark from a domain outside canada.ca.

Frequently asked questions

Does Service Canada ever call to suspend a Social Insurance Number?

No. Service Canada has confirmed in writing on its public scam-warning page at canada.ca/en/employment-social-development/services/sin that it does not call Canadians to suspend SINs. A SIN cannot be suspended over the phone. There is no procedure for it. Any call that claims to suspend your SIN is fraud.

The caller ID showed a Service Canada or RCMP number. Was it really them?

Almost certainly not. Caller ID on incoming calls can be set to any number through internet calling services. The CAFC and CRTC both publish guidance on caller ID spoofing. Verify by hanging up and calling the published number at canada.ca yourself.

I gave the caller my SIN. Should I apply for a new one?

Maybe, but not automatically. Service Canada only issues a new SIN if there is confirmed evidence the existing number has been used for fraud. Call 1-800-206-7218 and follow their assessment. The Office of the Privacy Commissioner of Canada also notes that a new SIN does not erase the old one from credit reports, so a fraud alert at Equifax Canada and TransUnion Canada is the more impactful first step in most cases.

Where do I report a SIN scam call in Canada?

The Canadian Anti-Fraud Centre at 1-888-495-8501 or through the online Fraud Reporting System at antifraudcentre-centreantifraude.ca. Service Canada SIN concerns separately at 1-800-206-7218. If money was lost, file a police report with your local detachment as well. CAFC reports feed RCMP investigative priorities and bank-side recovery work.

How do I place a free fraud alert with Equifax Canada and TransUnion Canada?

Equifax Canada: call 1-800-465-7166 or visit equifax.ca. TransUnion Canada: call 1-800-663-9980 or visit transunion.ca. Both alerts are free, can be requested by phone or online, and force creditors to verify your identity before opening a new account. The alert is valid for six years and renewable.

Is service-canada-sin.ca an official Government of Canada domain?

No. Every legitimate Service Canada and Government of Canada online service lives under canada.ca. Hyphenated, abbreviated, or alternate-TLD domains such as service-canada-sin.ca, sin-canada.online, gc-ca-sin.net, or canada-sin-update.com are not official, regardless of how authentic the design looks. If the URL is not canada.ca it is not Service Canada.

I am a newcomer and the call sounded very official. Is there an extra safety step for me?

Yes. Settlement agencies across Canada, including Settlement.org in Ontario and YMCA newcomer services nationally, can verify any government communication free of charge. Hang up and bring the question to your settlement worker before responding. Real federal agencies will wait; scammers will not.

The "officer" asked me to pay in gift cards or Bitcoin. Is that ever legitimate?

No. No Canadian federal agency accepts gift cards, prepaid cards, cryptocurrency, or wire transfers to "secure" your file. Service Canada, the CRA, RCMP, and CBSA all publish this rule. A gift-card or Bitcoin payment request is the single most reliable indicator of fraud on a government-impersonation call.

Related reading

• CRA tax refund scam in Canada: the lookalike domains and the recovery playbook
• Your bank will never call. The scammer always will.
• HMRC tax refund scam in the UK: how the text and email lures work
• IRS tax refund text and email scam: the US version

Bottom line: Service Canada does not call to suspend Social Insurance Numbers. If a robocall tells you to press 1, do not press 1. If a live "officer" demands your SIN, banking details, or a gift-card payment, hang up and report to the Canadian Anti-Fraud Centre at 1-888-495-8501. If you already gave information, work the 24-hour recovery list above: Service Canada 1-800-206-7218, Equifax Canada 1-800-465-7166, TransUnion Canada 1-800-663-9980, CRA 1-800-959-8281. Install SafeBrowz to catch the lookalike Service Canada domains the next time a call tries to send you to one.