Payment Fraud – How Bad is it in Canada?

Ever had that sneaky feeling when you double-check your email, wondering, "Did my vendor actually send this?" Well, you're not alone! Canadian businesses are facing a wave of payment fraud, and it's more sophisticated than ever. Let’s dive into the details so you don’t end up sending your hard-earned money straight into the hands of a scammer.

A new Payments Canada study reveals that 20% of Canadian businesses have reported incidents of payment fraud, compared to 13% of consumers. Common scams include impersonator fraud, intercepted e-Transfers, and credit card fraud. Even though many businesses reported confidence in their security measures, it’s clear that fraudsters are keeping busy!


How It Works:

Here’s how fraudsters typically execute these scams:

  1. Impersonator Scams: Cybercriminals pretend to be trusted business contacts, like vendors or clients, and request urgent payments or sensitive information. They often use look-alike email addresses that seem legitimate.
  2. Intercepted e-Transfers: Fraudsters intercept e-Transfers intended for legitimate recipients, rerouting the funds into their own accounts.
  3. Credit Card Fraud: Unauthorized charges made using stolen credit card details from the business or its employees.


Who’s Targeted:

Payment fraud targets businesses of all sizes, but large commercial enterprises are particularly vulnerable, with 26% reporting fraud incidents—higher than medium-sized (23%) and small businesses (16%). Companies dealing with regular vendor payments or those in industries like finance, e-commerce, and services are prime targets.


Real-Life Example:

Imagine receiving an invoice from a trusted supplier that looks exactly like the real deal—logo, email address, everything. One Canadian company did just that, only to find out that the payment of $3,000 they sent went to a fraudster’s account. By the time they realized, the money was long gone, and their supplier had never even sent an invoice. This is the reality of impersonator scams.


Why You Should Care:

Even though 63% of businesses feel confident in their fraud defenses, the truth is that scams are evolving fast. A slip-up like sending money to a fraudulent account could be devastating, especially for smaller businesses. Whether it’s an intercepted e-Transfer or a fake invoice, your company’s finances—and reputation—are at risk.


How to Protect Yourself:

Here’s how you can guard against payment fraud:

  1. Verify Payment Requests: Always double-check by calling or texting your vendor before transferring money, especially for large amounts.
  2. Implement Two-Step Authentication: Use two-factor authentication (2FA) on financial accounts to add an extra layer of protection.
  3. Monitor Suspicious Emails: Stay alert for phishing emails, especially those requesting money or login credentials. Verify that email addresses match exactly, down to the domain name.
  4. Limit Sharing of Sensitive Data: Be cautious when sharing personal or business information online, particularly on unfamiliar sites.
  5. Update Passwords Regularly: Use strong, unique passwords for different accounts, and avoid storing them on personal devices.


Quick Tips:

  • Did you know? 45% of businesses have noticed an increase in fraud attempts through email in the past year. Always double-check any suspicious requests!
  • Pro Tip: Consider implementing phishing simulations to test and train your team on identifying suspicious emails. An aware team is your best defense.


Have you experienced any fraud or suspicious payment requests in your business? Share your story with us—it could help others avoid falling victim to similar scams.

Stay safe, stay informed,


Key Terms Explained:

  1. Impersonator Scam: A type of fraud where attackers pose as trusted contacts to trick victims into sending money or sharing sensitive information.
  2. Two-Step Authentication (2FA): A security process where a second form of verification (like a texted code) is required in addition to a password.
  3. e-Transfer: An electronic method of transferring money directly between banks, commonly used in Canada.

To read more, kindly find source article here


How to Prevent Vendor Email Compromise Attacks