CRA/RCMP Tax-Scam Vishing Network - Project OCTAVIA (2018-2020)

What happened

Beginning at least in 2014 and escalating through 2018-2020, a network of India-based call centres ran a mass vishing campaign against Canadian taxpayers, using auto-dialed robocalls and live callers who impersonated Canada Revenue Agency and, in escalated cases, RCMP officers, falsely claiming victims owed back taxes and threatening immediate arrest, imprisonment, or deportation unless payment was made right away via gift cards, Bitcoin, wire transfer, or e-transfer. CBC Marketplace traced a major hub to a Mumbai apartment building in 2018. RCMP's Greater Toronto Area Financial Crime Section opened Project OCTAVIA in October 2018 to combine public-awareness efforts, disruption, and enforcement; working with Indian police, the RCMP Liaison Office in New Delhi, CAFC, CRA, CBSA, and FINTRAC, authorities conducted a wave of raids that dismantled roughly 39-40 illegal call centres in India by 2019 and arrested dozens of operators there. In Canada, RCMP pursued alleged money mules and money-mule managers accused of laundering scam proceeds overseas, announcing arrests, charges, and Canada-wide warrants during 2020.

How it worked

The scam used mass auto-dialers ("robo-dialers") to blast pre-recorded messages to Canadian landlines and cellphones claiming the recipient owed back taxes to the Canada Revenue Agency and must call back immediately or face arrest. Victims who called back reached a "call opener" in an India-based boiler-room call centre (a major hub was traced by CBC Marketplace to a Mumbai apartment building) who, using spoofed caller ID and scripted authority language, impersonated a CRA officer or, in escalated calls, an RCMP officer. Callers cited fabricated case/badge numbers, threatened immediate arrest, jail, asset seizure, deportation (used disproportionately against new immigrants), or in some scripts loss of custody of children, and pressured the victim to resolve the "debt" that same call. Payment was demanded through channels that are irreversible and hard to trace: prepaid gift cards (iTunes, Steam), Bitcoin ATMs, wire transfers, e-transfers, or cash pickup, sometimes via a secondary "collector" who visited the victim in person. Later variants layered in a fake "accountant" persona and call-tech that prevented victims from hanging up. Proceeds were laundered back to India through Canada-based "money mules" and "money mule managers" who received, cash-structured, and forwarded the funds, and through cryptocurrency conversion. The RCMP GTA Financial Crime Section (Toronto West Detachment) opened Project OCTAVIA in October 2018 to combine public-awareness work, disruption, and enforcement, coordinating with CAFC, CRA, CBSA, FINTRAC, the RCMP Liaison Office in New Delhi, India's Central Bureau of Investigation, and US authorities based in India.

The lure and the tell

Lure: an automated or live call falsely claiming to be from the Canada Revenue Agency (and, in escalated calls, the RCMP) stating the recipient owes back taxes or fines and faces immediate arrest, jail, asset seizure, or deportation unless the debt is settled on the spot; urgency was reinforced with fabricated case numbers, badge/officer names, and threats extending to loss of employment or child custody. The "tell" that distinguished it from any genuine government contact: CRA and RCMP never initiate contact demanding immediate payment by gift card, Bitcoin, wire/e-transfer, or prepaid card, never threaten instant arrest over the phone, and never ask for payment to resolve a tax debt in a single call; genuine CRA correspondence is mailed and payment goes through CRA's own online account or cheque, never gift cards or crypto.

Outcome

Indian law enforcement, working with RCMP's Liaison Office in New Delhi and India's Central Bureau of Investigation, raided and dismantled roughly 39-40 illegal call centres in the Mumbai and Noida/New Delhi areas between September 2018 and 2019, with RCMP/CAFC reporting over 60 arrests in India by early 2019 and CBC later citing 45 arrests tied to 39 raids by August 2019. On the Canadian side, RCMP's Project OCTAVIA investigated alleged money-mule networks accused of laundering proceeds back to India. On February 12, 2020, RCMP arrested and charged Brampton, Ontario residents Gurinderpreet Dhaliwal and Inderpreet Dhaliwal with fraud over $5,000, laundering proceeds of crime, and possession of property obtained by crime, seizing roughly $26,000 cash, $114,000 in jewelry, and a cash-counting machine; a Canada-wide warrant was also issued for another defendant then believed to be in India. RCMP continued announcing charges and warrants during 2020, including charges against two people then believed to be in Nepal and Thomas Pao, who was then believed to be in China. Pao was arrested at Toronto Pearson airport on April 26, 2024, after arriving from China; National Post reported on June 7, 2024 that his case remained before the courts. Public Safety Canada credited Project OCTAVIA with helping cut reported CRA-scam losses from $6.4 million in 2018 to $1.4 million in 2019, though the underlying networks adapted their scripts and continued targeting Canadians afterward.

Why it matters

This case is a textbook illustration of how authority-impersonation vishing scales into an industrial, transnational criminal enterprise: a single scam script (fake CRA tax debt, arrest threat, gift-card payment) run through robo-dialers generated tens of millions of dollars in losses across tens of thousands of victims over roughly half a decade, disproportionately harming elderly people and new immigrants who were less familiar with how Canadian government agencies actually communicate. Project OCTAVIA was disbanded within a year of the Dhaliwal arrests even as scam calls continued. The case also demonstrates the limits of takedown-only enforcement: even after ~39-40 India call centres were raided and Canadian money mules were arrested and charged, the network adapted (adding "Bank Investigator" and "Tech Support" personas) and continued targeting Canadians, underscoring that disrupting the call centres does not eliminate the underlying playbook, and that user-side recognition (knowing CRA never demands gift-card/crypto payment or threatens instant phone arrest) remains a necessary complementary defense alongside law enforcement action.

Defenses

RCMP/CRA/CAFC public-awareness campaigns reiterating that CRA never demands payment by gift card, cryptocurrency, e-transfer, prepaid card, or wire transfer, and never threatens immediate arrest/deportation by phone; "hang up and report to CAFC" guidance; international law-enforcement cooperation (RCMP Liaison Office-New Delhi, Indian CBI, US authorities in India, CBSA, FINTRAC) to identify and raid call centres; RCMP financial-crime units tracing domestic money-mule networks via FINTRAC financial-intelligence referrals; prosecution of Canada-based facilitators under fraud/money-laundering statutes; consumer education urging caller-ID skepticism and verification via official CRA callback numbers.