There has been a major increase in the number of fraudulent email money transfers being reported to us. Just in the last week alone we have had almost a dozen reports of people receiving fraudulent email money transfers from a sender claiming to be the Canada Revenue Agency.
There are two things to look for to confirm fraudulent email money transfers:
1) THE CANADA REVENUE AGENCY NEVER SENDS MONEY BY EMAIL. The Canada Revenue Agency will send a physical cheque by mail or they will deposit the funds directly into your bank account, but they will not email money.
2) The actual deposit link will not match the sender’s email. If you hover your mouse over the link from within a web browser, look at the bottom left corner of your screen; it should include an “https” indicating a secured domain and the domain will include “interac.ca” within it. This may not be possible to do on all devices.
- A factual Interac Email Money Transfer link will show “https://etransfer.interac.ca/etc…” at the bottom left of your browser.
- The fraudulent email money transfer link above shows “http://moreen.kr/multiple-public-ip-for-an-host/etc…”. Note that it doesn’t contain the “https” or the “interac.ca” domain.
The extremely scary part about this is the sophistication of this year’s campaign. As you can see from the image above, the fraudulent email money transfers have many of the characteristics of a genuine transfer. It has the official logos, it has the official layout and content and there are no grammatical errors commonly associated with these scams. The scariest of all is that the email appears to be sent from the official Interac Email Money Transfer email address, shows the factual head office address and contains a valid link to the interac.ca website. If you check out our 2016 blog post, you can see just how far the scam has come in just over a year.
The fraudulent email money transfers are designed to trick you into providing personal and financial information, commonly known as a phishing scam. In recent weeks, we have also seen an increase in similar scams by fraudsters impersonating the major banks, claiming that your account has been locked for security purposes and you must reactivate your account by clicking a link.
Your best line of defence is to never click on any unexpected email links and avoid opening these emails if you can. If you do confirm the email is fraudulent, you should report it as a phishing scam within your email (usually found under the “Junk” option) and report it to the Canadian Anti-Fraud Centre.
Birrer Sangret LLP provides all our clients with year-round representation and account monitoring with the Canada Revenue Agency and can provide immediate assistance to confirm whether any phone calls, emails or other communications are legitimate. If you would like to know more about how we can protect your Canada Revenue Agency accounts, call us today.