I fell for this scam - but can’t ask for a password reset until Monday. How seriously am I at risk?
Don’t know but I caught it within 24 hours and the CRA rep at the help desk checked and said it didn’t look like anybody had done anything with it. Check your list of returns efiled and make sure that it matches up with what actually got efiled by you. The problem seems to be that once someone has your user name and password they can then file bogus returns or amendments and apparently change direct deposit info for you or clients (I think)
@BertMulderCGA posted an article earlier today that details how some of these scams work. A good read.