The CRA says bad actors send bogus online notices. They promise quick money back. The tax office insists it only uses its secure online account for legit notices. Any extra message is a hoax. Stay away from or give personal info. Instead, sign in yourself to your profile to verify. Payments for those who meet the rules start on the announced date. Stay alert with any sudden payment pitches.