The St. Paul RCMP has issued a warning to the public regarding a recent sophisticated spear phishing scam that targeted a local organization.
In this instance, scammers impersonated a sales representative from a third-party company that the organization was buying equipment from. They achieved this by duplicating the representative’s email address with a minor character change, making the fraudulent email appear nearly identical to the legitimate one. The scammers continued the conversation about the purchase and eventually provided a fraudulent bank account where the organization transferred the payment.
Spear phishing scams are particularly dangerous because they often involve scammers who possess significant knowledge about the target business, including the names of key personnel and details about upcoming transactions. The scammers then communicate with buyers using seemingly legitimate methods, such as identical email addresses or “new” phone numbers, tricking the buyers into believing they are dealing with the actual seller.
The St. Paul RCMP urges businesses and individuals purchasing equipment or products through email or phone to be vigilant and look for the following signs of spear phishing.
Email address changes, bank account verification, phone number changes, unsolicited communication, urgency and high-pressure tactics, and unusual payment methods.
If you or someone you know falls victim to this scam or any other type of fraud, it is crucial to report it to your local police and the Canadian Anti-Fraud Centre. For more information, visit the Canadian Anti-Fraud Centre’s website.
