How police, U.S. secret service helped an Ont. business being scammed out of $615K
Earlier this month, a business in the Toronto area fell for a spear phishing scam nearly losing more than $615,000, police say.
Thanks to some quick action, the $615,820 wire transfer sent from a Mississauga company to a U.S. bank was intercepted and frozen before fraudsters could get their hands on it, Ontario Provincial Police said in a news release Monday.
OPP received a call Feb. 2 from the Canadian Anti-Fraud Centre (CAFC) after it received a complaint about a spear phishing fraud, which happens when business emails are compromised.
The United States Secret Service was contacted which then alerted the U.S. financial institution.
"As a result of the timely reporting to the CAFC and the quick action of the members from each organization, the business is well-positioned to recover the funds," OPP said.
- Download the CTV News app now
- Get local breaking news alerts
- Daily newsletter with the top local stories emailed to your inbox
How spear phishing works
In a spear phishing scam, "fraudsters send messages to a targeted business or individual’s email account, often to the accounts payable department."
"Fraudsters will create an email address similar to the targeted company’s email address in order to appear as though the email is originating from a trusted source (a supplier or contractor)," OPP said.
"The fraudster will request an urgent payment to an alternate bank account for an invoice that is due."
Scammers may also send harmful malware software.
"If an employee clicks on it, a rule will be created to send copies of incoming emails to one of the fraudster’s email accounts," police said.
"Fraudsters will take their time to collect information, study the language on their intended targets and look for important contacts, payments and dates so they can send convincing emails from a seemingly trusted source. Fraudsters launch their attack when an accounts payable invoice has been identified."
Tips to protect yourself from spear phishing:
- Complete cyber and fraud training
- Avoid opening unsolicited emails or clicking on suspicious links or attachments
- Hover your mouse over an email address or link to confirm they are from someone you know and are correct
- Restrict sharing information publicly, including on social media
- Create detailed payment procedures including verbal authentication for any urgent requests or changes in payment details
- Verify unusual requests
- Upgrade and update technical security software
- Establish procedures for identifying, managing and reporting suspected fraud
"If you become a victim of a fraud or know someone who has, contact your local police service to report the crime and report it to the CAFC at 1-888-495-8501 or online on the Fraud Reporting System (FRS), even if a financial loss did not occur," OPP said.
Recent attacks
Canadians lost more than $58 million in the 1,239 spear phishing fraud cases reported to the Canadian Anti-Fraud Centre in 2023. (CTV News Northern Ontario)Laurentian University is continuing to recover from a cyber incident on Feb. 18 that resulted in all IT systems being shutdown.
Last month, fraudsters hacked a construction contractor's email and defrauded the City of Greater Sudbury out of $1.5 million.
CTVNews.ca Top Stories
![](https://www.ctvnews.ca/polopoly_fs/1.4972530.1591455178!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg)
Prince William made $42 million from his newly inherited estate last year, reports show
Newly released financial reports show that William, the Prince of Wales, drew a salary of $42.1 million last fiscal year, his first since inheriting the vast and lucrative Duchy of Cornwall.
'Sick to my stomach': People grieve Jasper National Park by sharing favourite photos
As an out-of-control wildfire roared through Alberta’s famed Jasper National Park and its townsite late Wednesday, many are fearing the worst as officials warned of 'significant loss' within the area.
LIVE @ 11:15 A.M. MT Extent of Jasper wildfire damage still unknown; Alberta Wildfire hosting update
Officials are waiting to learn Thursday morning the extent of wildfire damage in the Jasper townsite of Jasper National Park, which flames began to eat away at the night before.
Canadian women's soccer team staffer given suspended prison sentence over drone incident, prosecutor says
A Canada women's soccer team staffer has been given an eight-month suspended prison sentence after flying a drone to film the closed-door training session of the New Zealand team on Monday, the prosecutor's office said in a statement.
Jennifer Aniston criticizes JD Vance for 'childless cat ladies' remarks: 'I pray that your daughter is fortunate enough to bear children'
Jennifer Aniston is criticizing JD Vance for comments he made in his past about women without children.
Sale of envoy's NYC condo 'expected to exceed' $9M: government
The current official residence for Canada's representative in New York City is 'being readied for sale,' according to a spokesperson from Global Affairs Canada.
Jasper wildfire burns buildings, while poor air quality forces some fire crews out
Prime Minister Justin Trudeau announced on social media that Ottawa has approved Alberta's request for federal assistance after a fast-moving wildfire hit Jasper National Park and its townsite late Wednesday.
'I'm so broke': Two Toronto women speak out after losing $76,000 in romance scam
Two women from the Toronto area are speaking out after losing thousands of dollars to a romance scam, including a single mother who lost $62,000.
Barrie-Innisfil MPP 'blacked-out' and crashed car into window of child care centre
Staff at a Barrie child care centre say they are frustrated by what they call a local MPP's inadequate response after a car crashed through a window in one of the toddler rooms.