How police, U.S. secret service helped an Ont. business being scammed out of $615K
Earlier this month, a business in the Toronto area fell for a spear phishing scam nearly losing more than $615,000, police say.
Thanks to some quick action, the $615,820 wire transfer sent from a Mississauga company to a U.S. bank was intercepted and frozen before fraudsters could get their hands on it, Ontario Provincial Police said in a news release Monday.
OPP received a call Feb. 2 from the Canadian Anti-Fraud Centre (CAFC) after it received a complaint about a spear phishing fraud, which happens when business emails are compromised.
The United States Secret Service was contacted which then alerted the U.S. financial institution.
"As a result of the timely reporting to the CAFC and the quick action of the members from each organization, the business is well-positioned to recover the funds," OPP said.
- Download the CTV News app now
- Get local breaking news alerts
- Daily newsletter with the top local stories emailed to your inbox
How spear phishing works
In a spear phishing scam, "fraudsters send messages to a targeted business or individual’s email account, often to the accounts payable department."
"Fraudsters will create an email address similar to the targeted company’s email address in order to appear as though the email is originating from a trusted source (a supplier or contractor)," OPP said.
"The fraudster will request an urgent payment to an alternate bank account for an invoice that is due."
Scammers may also send harmful malware software.
"If an employee clicks on it, a rule will be created to send copies of incoming emails to one of the fraudster’s email accounts," police said.
"Fraudsters will take their time to collect information, study the language on their intended targets and look for important contacts, payments and dates so they can send convincing emails from a seemingly trusted source. Fraudsters launch their attack when an accounts payable invoice has been identified."
Tips to protect yourself from spear phishing:
- Complete cyber and fraud training
- Avoid opening unsolicited emails or clicking on suspicious links or attachments
- Hover your mouse over an email address or link to confirm they are from someone you know and are correct
- Restrict sharing information publicly, including on social media
- Create detailed payment procedures including verbal authentication for any urgent requests or changes in payment details
- Verify unusual requests
- Upgrade and update technical security software
- Establish procedures for identifying, managing and reporting suspected fraud
"If you become a victim of a fraud or know someone who has, contact your local police service to report the crime and report it to the CAFC at 1-888-495-8501 or online on the Fraud Reporting System (FRS), even if a financial loss did not occur," OPP said.
Recent attacks
Canadians lost more than $58 million in the 1,239 spear phishing fraud cases reported to the Canadian Anti-Fraud Centre in 2023. (CTV News Northern Ontario)Laurentian University is continuing to recover from a cyber incident on Feb. 18 that resulted in all IT systems being shutdown.
Last month, fraudsters hacked a construction contractor's email and defrauded the City of Greater Sudbury out of $1.5 million.
CTVNews.ca Top Stories
Iran's president and foreign minister die in helicopter crash at moment of high tensions in Mideast
Iranian President Ebrahim Raisi and the country's foreign minister were found dead Monday hours after their helicopter crashed in fog, leaving the Islamic Republic without two key leaders as extraordinary tensions grip the wider Middle East.
Woman in her 30s in critical condition after her truck collided with a Via Rail train near Montreal
A woman in her 30s is in critical condition after the pick-up truck she was driving was struck by a Via Rail passenger train Monday morning in Quebec's Monteregie region.
What is BORG drinking, and why is it a dangerous trend? An expert explains
If you've been to a party lately and haven't seen someone drinking a BORG, you're likely not partying with college students.
Britain slammed in inquiry for infecting thousands with tainted blood and covering up the scandal
British authorities and the country's public health service knowingly exposed tens of thousands of patients to deadly infections through contaminated blood and blood products, and hid the truth about the disaster for decades, an inquiry into the U.K.'s infected blood scandal found Monday.
The world's best airline is paying staff a bonus of 8 months' salary
Singapore Airlines will reward its employees with a bonus worth nearly eight months of salary, a person familiar with the matter told CNN on Friday.
U.S. Supreme Court rejects an appeal from a Canadian man once held at Guantanamo
The U.S. Supreme Court on Monday rejected an appeal by a Canadian-born former Guantanamo detainee who was seeking to wipe away his war crimes convictions, including for killing a U.S. soldier in Afghanistan.
ICC prosecutor seeks arrest warrant for Israeli and Hamas leaders, including Netanyahu
The chief prosecutor of the International Criminal Court said Monday he is seeking arrest warrants for leaders of Israel and Hamas, including Israeli Prime Minister Benjamin Netanyahu, over actions taken during their seven-month war.
What we know so far about the helicopter crash that killed Iran's president
The apparent crash of a helicopter carrying Iran's president and foreign minister on Sunday sent shock waves around the region.
Red Lobster seeks bankruptcy protection with US$100 million in financing commitments
U.S.-based restaurant chain Red Lobster has filed for Chapter 11 bankruptcy protection in a Florida court after securing $100 million in financing commitments from its existing lenders, the company said on Sunday.