3 steps to verify your SIN with Service Canada and IRCC

What to take away

A privacy scam usually starts with someone asking you to confirm your SIN by text, email or a link, and no real government process works that way.
Verify your SIN through Service Canada, confirm your identity with provincial ID, and use IRCC channels for immigration documents.
No government office asks for your full SIN by email, text or social media message.
Genuine requests arrive through a My Service Canada Account, a provincial registry or an IRCC online account you opened yourself.
Report imitation requests to the Canadian Anti-Fraud Centre and the Office of the Privacy Commissioner of Canada.

Step 1: verifying your SIN through Service Canada

A Social Insurance Number is the key to working, filing taxes and getting benefits in Canada. Because it is so useful, it is also the number scammers ask for first. Verifying your own SIN record with Service Canada is the safe starting point, and it costs nothing to check.

Start with the document you already hold. Your SIN letter or card shows the number, your name and the date it was issued. If you have lost it, Service Canada can confirm the record and mail a confirmation. You do not need a third party to do this for you.

Service Canada runs SIN verification through its own offices and through My Service Canada Account. The account is the online route, and it is tied to your identity.

Sign in to a Government of Canada online account only through the official page, never through a link someone sends you. That is the first line of defence against a privacy scam.

What Service Canada will and will not ask

Service Canada will ask for proof of identity when you apply, replace or amend a SIN. That happens in person, by mail with original documents, or through a verified online account. It will not ask you to confirm a SIN by replying to a text.

A genuine officer may call you about a benefit or a claim you started. The call will reference a file you opened. If a caller says your SIN is suspended and demands payment or a confirmation code, treat it as an imitation and hang up.

Documents you need

For a SIN application or replacement, Service Canada expects a primary identity document. A Canadian birth certificate, a certificate of Canadian citizenship, a permanent resident card or a work or study permit all qualify. You also need proof of your current address in most cases.

Keep the originals. Mail them only when Service Canada asks and only to the address printed on the official form. Photocopies are not accepted for a first SIN, and no courier should collect your documents at home.

Replacing a lost or compromised SIN

Report the loss to Service Canada so the record is flagged.
Apply for a replacement using original identity documents.
Contact the Canada Revenue Agency if you file taxes, so your account is watched.
Tell your bank and employer that the number may be misused.
Keep the new confirmation in a locked place, not in a phone photo album.

A replacement SIN is not a new number in most cases. Service Canada issues the same number again unless there is evidence of fraud. The value of the replacement is the paper trail and the flag on the file.

Example: a newcomer in Brampton

A newcomer in Brampton gets a text saying their SIN is locked and they must confirm it at a link. The message uses a Service Canada logo and a deadline of 24 hours. The real process never works this way.

The newcomer signs in to My Service Canada Account through the official page instead, sees the record is fine, and reports the text. No data is lost.

The example matters because the fake message copied the look of a real one but not the channel. The channel is what you can check. For a wider method, see the guide on what to do when a company lost my data canada.

When someone else verifies your SIN

Employers, banks and landlords may ask for your SIN, and each has a lawful reason. An employer needs it for payroll and tax slips. A bank needs it for interest reporting. A landlord does not need the full number, and you can decline.

Give the number only when a law or a clear service requires it. The Office of the Privacy Commissioner of Canada explains how SINs and driver's licences are used as identity documents and where the limits sit: SINs and driver's licences.

Step 2: confirming identity with provincial ID and documents

Provinces and territories issue the photo ID that most day to day checks rely on. Ontario, Quebec, British Columbia, Alberta, Nova Scotia, Manitoba and Saskatchewan each run their own registry or licensing office. The card proves who you are, and the process to get it is local.

Apply for a health card and a driver's licence or provincial photo card after you arrive. In most provinces you need proof of identity, proof of status in Canada and proof of address. A permanent resident card, a work permit or a study permit supports the application.

Provincial registries do not verify your SIN. They verify your name, date of birth and address. If a caller claims a provincial office needs your SIN to confirm your identity, that is a mismatch and a warning sign.

Address and name changes

Tell the province when you move. Health cards and licences carry your address, and mail sent to an old address can be taken by someone else. Update the record within the window your province sets, usually a short one after the move.

Name changes follow the same route. A marriage certificate, a legal name change document or a corrected immigration record may be needed. Keep the old and new documents together until every agency is updated.

Quebec and Law 25

Quebec adds a privacy layer through Law 25, which sets rules for how private organizations handle personal information. If a business asks for a copy of your health card or licence, it must have a reason and must limit what it keeps. You can ask what it holds and why.

Quebec's immigration portal is the place to start for provincial immigration steps and the documents tied to them: Immigration | Gouvernement du Québec. Alberta and British Columbia have their own private sector privacy laws, and PIPEDA covers much of the rest of the country.

What a registry will never do

A registry will not call to ask for a confirmation code. It will not ask you to pay a fee by gift card or crypto. It will not send a courier to collect your original birth certificate. Each of those patterns appears in the facebook marketplace interac e-transfer scam because they repeat across provinces.

Keep a document trail

Photograph each document you send and note the date.
Record the office name and the person you spoke with.
Keep tracking numbers for mailed originals.
Store copies in a locked drawer, not a shared cloud folder.
Check your credit report with both national bureaus once a year.

Step 3: IRCC processes for newcomers and permanent residents

Immigration, Refugees and Citizenship Canada handles permits, permanent residence and citizenship. Its processes are the ones newcomers meet first, and they are also the ones scammers copy most often. The Immigration and citizenship portal is the official starting point for every application and status check: Immigration and citizenship.

IRCC identity verification happens inside an application you started. You create an online account, you upload documents, and you receive messages in that account. The account is the record. If a message arrives outside it, the message is not from IRCC.

Biometrics are part of many applications. You give fingerprints and a photo at a collection point after IRCC sends a biometric instruction letter. The letter comes through your account. A request for biometrics by text is not genuine.

Fees and payment

IRCC fees are paid through the official portal or at a bank using the receipt the portal generates. No officer asks for payment by e-transfer, gift card or cryptocurrency. A demand for urgent payment to save an application is a classic imitation.

Keep every receipt. If someone later claims a payment is missing, the receipt is your proof. The same receipt also shows the file number, which helps IRCC find your case.

Status checks and delays

Check your status in your own account, not through a third party who offers to speed it up. Processing times are published and change with volume. A consultant who promises a faster decision for a cash fee is selling something that does not exist.

Authorized representatives can act for you, but only if you appoint them in writing through the IRCC process. A representative you never appointed cannot receive your mail or speak for you. Verify any consultant against the official register before you share documents.

Example: a work permit renewal in Alberta

A worker in Alberta renews a work permit and gets a call saying the application is incomplete and will be refused unless a fee is paid within an hour. The caller knows the file number, which makes the call seem real.

The worker opens the IRCC account, sees no such message, and calls the IRCC line listed on the official site. The application is fine.

File numbers leak through old emails and shared documents, so knowledge of a number proves nothing. The account is the only place where a real request appears. The Office of the Privacy Commissioner of Canada sets out how identity verification and identity theft are handled more broadly: OPC identities page.

Newcomer scams that imitate Service Canada and IRCC

Newcomer scams Canada wide follow a few shapes. Each one borrows a real institution's name and adds pressure. The pressure is the tell.

The first shape is the suspension threat. A caller says your SIN or permit is suspended and will be cancelled unless you confirm details. Service Canada and IRCC do not suspend status by phone and demand an immediate response.

The second shape is the refund or benefit offer. A message says you are owed money and needs your banking details to send it. Real benefits arrive through accounts you already hold, and the government already has your direct deposit details if you set them up.

The third shape is the fake employer. A job offer arrives with a request for a SIN, a copy of your permit and a fee for training. Real employers collect payroll details after hiring, not before an interview.

The fourth shape is the fake landlord or immigration consultant. Both ask for documents early and both may vanish with the copies. Share the minimum, and only after you have checked the person.

The fifth shape is the social media message. A profile that looks like an officer offers to fix your file for a fee. Government offices do not recruit clients through direct messages. The best phishing scams tools 2027 sets out the order of actions when one of these approaches you.

Why newcomers are targeted

Newcomers are targets because they are setting up several documents at once and may not know which office does what. A caller who mixes up Service Canada, IRCC and a provincial registry can sound official to someone still learning the system. Knowing the split removes the advantage.

Language pressure adds to it. A caller who speaks quickly and threatens a deadline counts on you not asking for the call in writing. Ask for everything in writing, and the call usually ends.

What the institutions actually share

Service Canada, IRCC and the provinces do not run a single combined verification line that calls you. Each holds its own record and each contacts you through its own account or mail. There is no central number that confirms all three at once.

The Canadian Anti-Fraud Centre collects reports and passes patterns to police and regulators. The Competition Bureau Canada handles deceptive marketing, and the CRTC handles some telecom based fraud. None of them will call to verify your SIN.

How to tell a genuine verification request from a fake one

Use the channel, not the tone. A real request arrives in an account you opened or in mail to the address on file. A fake one arrives wherever the sender can reach you.

Signal	Genuine request	Likely fake
Channel	Your online account or official mail	Text, email link, social message
Urgency	Normal processing time	Deadline of hours
Payment	Official portal or bank receipt	Gift card, crypto, e-transfer
Documents	Listed on the official form	Courier sent to your home
Contact	Number you find yourself	Number given by the caller

Check the sender address on any email. Government of Canada messages come from canada.ca addresses, and the sign in page is the one you reach yourself: Sign in to a Government of Canada online account.

A genuine officer will wait while you verify. A fake one will push you to stay on the line. That difference alone settles most calls.

A quick test before you reply

Hang up or close the message.
Find the office number on the official website yourself.
Sign in to your own account and look for the same request.
Ask for the request in writing if it is not there.
Report the contact if it fails these checks.

If the request is real, it will still be there after you check. Nothing genuine expires in the ten minutes it takes to confirm.

Devices and links

Do not open links in unexpected messages, even on a phone. A link can lead to a page that copies a sign in screen and captures what you type. Type the address yourself or use a bookmark you saved earlier. For more worked cases, see the best romance scams tools 2027.

Protecting your SIN once it is verified

Once your SIN is confirmed, the goal is to keep the number out of circulation. Treat it like a key, not a piece of identification you show on request.

Memorize the number and leave the card at home. Carry a provincial photo card or licence for everyday identification. A SIN card in a wallet is a loss waiting to happen.

Ask why before you give the number. Employers and banks have clear reasons. Gyms, landlords, phone retailers and online shops usually do not need it, and you can offer another document instead.

Shred old documents that show the number. Tax slips, pay stubs and benefit letters all carry it. A cross cut shredder costs little and removes the easiest route to misuse.

Check your mail. If a benefit letter or tax slip stops arriving, someone may have changed your address. Follow up with the issuing office the same week.

Watch your credit file

Order a credit report from both national bureaus each year and read the inquiries. An account you did not open is the clearest sign that a SIN has been misused. Dispute it in writing and keep the response.

A credit freeze or alert is not available in every province in the same form, so ask each bureau what it offers. A fraud alert on the file makes lenders check with you before opening new credit.

Digital habits that reduce exposure

Use a unique password for every government account and turn on two factor authentication where it is offered. Do not reuse the password from your email, because email is the reset route for everything else.

Be careful with public networks when you sign in to a government account. Use your own data connection if you can. Sign out when you finish, especially on a shared computer.

Keep a short list of the accounts that hold your SIN and review it twice a year. The list should name the office and the reason, nothing more. Store it where a visitor will not find it.

If the number is misused

Report the misuse to Service Canada, your bank and the police where you live. Then tell the Canadian Anti-Fraud Centre and the Office of the Privacy Commissioner of Canada. The OPC page on SINs and driver's licences explains how these documents are meant to be handled, which helps when you write your report.

Keep a file of every report, with dates and reference numbers. If the same misuse repeats, the file shows a pattern and speeds up the response.

Where to report an imitation request

Report every imitation, even the ones you saw through. Reports are how the pattern becomes visible to the agencies that can act.

The Canadian Anti-Fraud Centre takes reports of fraud and attempted fraud, including calls and messages that copy a government office. Its report line and online form are the central intake for these cases.

The Office of the Privacy Commissioner of Canada handles complaints about how personal information is handled, including misuse of a SIN. The OPC identities page linked above explains the scope, and the SIN page covers the document rules.

The Competition Bureau Canada takes reports about deceptive marketing, which covers fake job and loan offers. The CRTC handles some telecom based contacts, including unwanted calls and spoofed numbers.

Report to the police where you live if money was taken or documents were used. A police file number helps with banks and with any later dispute about the misuse.

What to include in a report

The number or address the message came from, the time it arrived, and the exact words used. A screenshot helps. Note whether you replied and what you shared, even if the answer is nothing.

Include your file numbers only where an agency asks for them. Do not send your full SIN in an email report. The agency already has the record, and the report is about the contact, not the number.

After you report

Expect little immediate feedback. Reports feed patterns, and a single report rarely produces a call back. Keep the reference number and add any later contact to the same file.

Tell others in your community. Newcomer networks spread warnings faster than any agency, and a single message in a group chat can stop the next person from replying. That is how a reported privacy scam loses its reach.

Common questions

Does Service Canada ever ask for my SIN by text? No. Service Canada contacts you through mail or your online account. A text asking you to confirm a SIN is an imitation.

Can IRCC cancel my permit by phone? No. Decisions arrive in your IRCC account and in writing. A caller who threatens cancellation on the spot is not an officer.

Do I need my SIN to rent an apartment in Canada? Usually not. A landlord may check references and income. A request for the full number before a lease is a warning sign.

What if I already gave my SIN to a fake caller? Report it to Service Canada, your bank and the Canadian Anti-Fraud Centre. Watch your credit reports for accounts you did not open.

Which office handles a complaint about a business that misused my SIN? The Office of the Privacy Commissioner of Canada handles complaints about personal information handling. In Quebec, Alberta and British Columbia, provincial privacy laws may also apply.

Is there one number to verify my SIN, permit and health card together? No. Each record sits with its own office: Service Canada for the SIN, IRCC for immigration documents, and your province for health and photo ID.