TL;DR: On May 8, 2026, the RCMP announced charges after investigating a series of cyberattacks on the Canada Emergency Wage Subsidy (CEWS). Fraudulent claims linked to the scheme totalled about C$5.7 million. Two individuals each face four Criminal Code charges, and they are scheduled to appear in court in Brampton on June 4, 2026. Charges are allegations, not findings of guilt.
What happened
The RCMP release says suspects used a compromised “Represent a Client” credential to file unauthorized CEWS applications for legitimate Canadian businesses whose CRA My Business Account access had been unlawfully obtained. The affected businesses did not know their accounts had been accessed or used.
The RCMP’s International Anticorruption Team began a joint investigation with the CRA’s Criminal Investigations Division in January 2021, with help from FINTRAC. The charges are fraud over $5,000, laundering proceeds of crime, possession of identity information to commit an indictable offence and possession of property obtained by crime.
Why it works
Once a criminal controls a business’s tax portal access, filings look routine to the agency. Owners often do not review portal activity, so unauthorized claims go unseen.
The release does not give prevention tips, so the steps below are general account-security measures.
Background: our explainers on account takeover fraud and how to report identity theft in Canada by province. See also Alberta RCMP Charge Man Over C$160,000 Sports Company Scheme and West Shore RCMP: Fake Police Letter Demands a Fine in 24 Hours.
Practical steps
- Review activity in your online tax and business accounts regularly and set up alerts where offered.
- Use a unique password and multi-factor authentication for those accounts.
- Limit who holds representative credentials and review them when staff or advisers change.
- Report suspected fraud to the Canadian Anti-Fraud Centre and your local police.
If you have already sent money
Call your bank or card issuer at once and ask to stop or recall the payment, then report it to the Canadian Anti-Fraud Centre (1-888-495-8501) and your local police. Our guides on reporting to the Canadian Anti-Fraud Centre, Canadian bank impersonation scams and how to reverse a wire transfer scam walk through the steps, and what to do after a scam, wherever you live covers the first 24 hours. Scammers often start with details taken from past leaks, so run our free digital footprint check to see what of yours is already exposed.
Frequently Asked Questions
How much was claimed fraudulently?
About C$5.7 million in fraudulent CEWS claims linked to the scheme, according to the RCMP release of May 8, 2026.
How did the scheme work?
Suspects used a compromised “Represent a Client” credential to file unauthorized applications for businesses whose CRA My Business Account access had been obtained unlawfully.
Who has been charged?
Two individuals, each with four Criminal Code offences. Charges are allegations, not findings of guilt.
Did the businesses know?
No. The affected businesses did not know their accounts had been accessed or used.
Sources
- RCMP: Investigation into cyber enabled wage subsidy fraud leads to charges (May 8, 2026)
- Canadian Anti-Fraud Centre
Related Reading
- Alberta RCMP Charge Man Over C$160,000 Sports Company Scheme
- West Shore RCMP: Fake Police Letter Demands a Fine in 24 Hours
- Report Fraud Launches in the UK: What Changes for Victims
- Canada Scam News: October 2026 Roundup and Warnings
- Average Loss per Victim by Scam Type (2025)
- What to do after a scam, wherever you live