CRA/RCMP Tax-Scam Vishing Network - Project OCTAVIA (2018-2020)

What Happened

Beginning at least in 2014 and escalating through 2018-2020, a network of India-based call centres ran a mass vishing campaign against Canadian taxpayers, using auto-dialed robocalls and live callers who impersonated Canada Revenue Agency (and, in escalated cases, RCMP) officers, falsely claiming victims owed back taxes and threatening immediate arrest, imprisonment, or deportation unless payment was made right away via gift cards, Bitcoin, wire transfer, or e-transfer. CBC Marketplace traced a major hub to a Mumbai apartment building in 2018. RCMP's Greater Toronto Area Financial Crime Section opened Project OCTAVIA in October 2018 to combine public-awareness efforts, disruption, and enforcement; working with Indian police, the RCMP Liaison Office in New Delhi, CAFC, CRA, CBSA, and FINTRAC, authorities conducted a wave of raids that dismantled roughly 39-40 illegal call centres in India by 2019 and arrested dozens of operators there. In Canada, RCMP identified and prosecuted domestic "money mules" and "money mule managers" who laundered scam proceeds back overseas, laying fraud and money-laundering charges against at least ten individuals between February and December 2020; of these, only the Dhaliwals were confirmed Canada-based residents arrested domestically, while Manik, Shrestha, Joshi, and Pao were charged via Canada-wide warrants while believed to be abroad (India, Nepal, and China respectively).

How the Attack Worked

The scam used mass auto-dialers ("robo-dialers") to blast pre-recorded messages to Canadian landlines and cellphones claiming the recipient owed back taxes to the Canada Revenue Agency and must call back immediately or face arrest. Victims who called back reached a "call opener" in an India-based boiler-room call centre (a major hub was traced by CBC Marketplace to a Mumbai apartment building) who, using spoofed caller ID and scripted authority language, impersonated a CRA officer or, in escalated calls, an RCMP officer. Callers cited fabricated case/badge numbers, threatened immediate arrest, jail, asset seizure, deportation (used disproportionately against new immigrants), or in some scripts loss of custody of children, and pressured the victim to resolve the "debt" that same call. Payment was demanded through channels that are irreversible and hard to trace: prepaid gift cards (iTunes, Steam), Bitcoin ATMs, wire transfers, e-transfers, or cash pickup, sometimes via a secondary "collector" who visited the victim in person. Later variants layered in a fake "accountant" persona and call-tech that prevented victims from hanging up. Proceeds were laundered back to India through Canada-based "money mules" and "money mule managers" who received, cash-structured, and forwarded the funds, and through cryptocurrency conversion. The RCMP GTA Financial Crime Section (Toronto West Detachment) opened Project OCTAVIA in October 2018 to combine public-awareness work, disruption, and enforcement, coordinating with CAFC, CRA, CBSA, FINTRAC, the RCMP Liaison Office in New Delhi, India's Central Bureau of Investigation, and US authorities based in India.

The Lure & the Tell

Lure: an automated or live call falsely claiming to be from the Canada Revenue Agency (and, in escalated calls, the RCMP) stating the recipient owes back taxes or fines and faces immediate arrest, jail, asset seizure, or deportation unless the debt is settled on the spot; urgency was reinforced with fabricated case numbers, badge/officer names, and threats extending to loss of employment or child custody. The "tell" that distinguished it from any genuine government contact: CRA and RCMP never initiate contact demanding immediate payment by gift card, Bitcoin, wire/e-transfer, or prepaid card, never threaten instant arrest over the phone, and never ask for payment to resolve a tax debt in a single call; genuine CRA correspondence is mailed and payment goes through CRA's own online account or cheque, never gift cards or crypto.

Outcome

Indian law enforcement, working with RCMP's Liaison Office in New Delhi and India's Central Bureau of Investigation, raided and dismantled roughly 39-40 illegal call centres in the Mumbai and Noida/New Delhi areas between September 2018 and 2019, with RCMP/CAFC reporting over 60 arrests in India by early 2019 and CBC later citing 45 arrests tied to 39 raids by August 2019. On the Canadian side, RCMP's Project OCTAVIA identified domestic money-mule networks laundering proceeds back to India; on February 12, 2020, RCMP arrested and charged Brampton, Ontario residents Gurinderpreet Dhaliwal and Inderpreet Dhaliwal with fraud over $5,000, laundering proceeds of crime, and possession of property obtained by crime, seizing roughly $26,000 cash, $114,000 in jewelry, and a cash-counting machine; a Canada-wide warrant was also issued for Shantanu Manik, a foreign national believed to be in India. RCMP continued laying charges against facilitators through 2020, including Vimal Shrestha and Bindisha Joshi of Lalitpur/Kathmandu, Nepal (announced Nov 27, 2020, with Canada-wide warrants issued for both as they were believed to be in Nepal) and Thomas Pao, who held a Mississauga address (charged Dec 3, 2020, with a Canada-wide warrant issued as he was believed to be in China); RCMP said nine individuals had been charged as of December 3, 2020, rising to ten by December 23, 2020. Only the Dhaliwals are confirmed as Canada-based residents arrested in Canada; Manik, Shrestha, Joshi, and (per the warrant) Pao were all charged in absentia while believed to be located outside Canada. Public Safety Canada credited Project OCTAVIA with helping cut reported CRA-scam losses from $6.4 million in 2018 to $1.4 million in 2019, though RCMP and CBC both note the underlying networks adapted their scripts (e.g., adding "Bank Investigator" and "Tech Support" personas) and continued targeting Canadians afterward.

Why It Matters

This case is a textbook illustration of how authority-impersonation vishing scales into an industrial, transnational criminal enterprise: a single scam script (fake CRA tax debt, arrest threat, gift-card payment) run through robo-dialers generated tens of millions of dollars in losses across tens of thousands of victims over roughly half a decade, disproportionately harming elderly people and new immigrants who were less familiar with how Canadian government agencies actually communicate. It also demonstrates the limits of takedown-only enforcement: even after ~39-40 India call centres were raided and Canadian money mules were arrested and charged, RCMP itself noted the network adapted (adding "Bank Investigator" and "Tech Support" personas) and continued targeting Canadians, underscoring that disrupting the call centres does not eliminate the underlying playbook, and that user-side recognition (knowing CRA never demands gift-card/crypto payment or threatens instant phone arrest) remains a necessary complementary defense alongside law enforcement action.

Defenses

RCMP/CRA/CAFC public-awareness campaigns reiterating that CRA never demands payment by gift card, cryptocurrency, e-transfer, prepaid card, or wire transfer, and never threatens immediate arrest/deportation by phone; "hang up and report to CAFC" guidance; international law-enforcement cooperation (RCMP Liaison Office-New Delhi, Indian CBI, US authorities in India, CBSA, FINTRAC) to identify and raid call centres; RCMP financial-crime units tracing domestic money-mule networks via FINTRAC financial-intelligence referrals; prosecution of Canada-based facilitators under fraud/money-laundering statutes; consumer education urging caller-ID skepticism and verification via official CRA callback numbers.