An Ontario woman lost over $26,000 after mistakenly entering her personal and banking information into a fraudulent website impersonating the Canada Revenue Agency (CRA). The scam, which leveraged a fake site promoted through Google search ads, highlights growing concerns over online impersonation fraud targeting Canadians.
Ruth Jean, a small business owner from London, Ontario, was attempting to set up a CRA business account in March when she searched for “CRA Business login” through Google. She clicked on one of the top results, which appeared to be an official CRA website. Trusting its appearance, she entered sensitive details including her Social Insurance Number, bank card number, expiry date, and ATM password.
Almost immediately after submission, the site went dark — and shortly afterward, Jean discovered her Scotiabank account had been emptied of $26,820. The fraudulent site had been a phishing scheme designed to harvest personal and banking credentials.
Cybersecurity experts warn that scammers are increasingly using paid ads to appear at the top of search engine results, often mimicking trusted institutions like the CRA. Despite reporting the incident, Jean has not yet been reimbursed and is speaking out to warn others.
Both Google and Scotiabank have issued statements saying they take fraud seriously, but Jean says more needs to be done to prevent this kind of impersonation fraud. The case underscores the importance of verifying URLs and avoiding sponsored links when accessing sensitive government or financial portals
