St. Paul RCMP warns of ‘Spear Phishing’ Fraud
St. Paul RCMP are warning the public of a recent instance where scammers targeted a local organization using sophisticated Spear Phishing Techniques.
The was buying equipment from a third-party company when scammers duplicated the sales representatives’ email with 1 character change and continued the conversation for the purchase. The scammers provided a fraudulent bank account where the organization transferred the payment.
Scammers who conduct spear phishing often have significant knowledge of the business conducting the sale, including names and upcoming transactions. They will then engage in conversations with the buyers through an identical method of communication such as identical email or a “new” phone number that goes unnoticed making the buyer believe they are talking to the legitimate seller and provide bank accounts to send the payment.
St. Paul RCMP encourages businesses and people purchasing equipment or products through email or phone numbers to ensure they are aware of the following signs of spear phishing:
- Ensure the email address does not change;
- If payment is to be sent to a bank account, ensure the bank account is registered to the business/buyer;
- A sudden change in the cell phone number of a manager or owner;
- Unsolicited communication though text message only;
- Sudden urgency, and high-pressure tactics to quickly resolve the matter;
- Requests for money to be deposited into a Bitcoin ATM, or sent through gift cards; and
- Use of QR codes for payment.
If you, or someone you know, is a victim of this scam or any other type of fraud, report it to your local police and the Canadian Anti-Fraud Centre. For more information, visit: https://antifraudcentre-centreantifraude.ca/index-eng.htm
Cpl Mathew Howell
Alberta RCMP
