Ca.Finance.Yahoo Spear-Phishing Scams Cost Canadians $57.7M in 2026
Article Content
- •Canadians reported $57.7 million in spear-phishing losses in the first half of 2026.
- •Fraudsters impersonate trusted contacts to redirect payments through convincing emails.
- •Indigenous businesses in northern Ontario lost over $800,000 due to these scams.
In the first half of 2026, Canadians reported approximately $57.7 million in losses due to spear-phishing scams, as reported by the Canadian Anti-Fraud Centre (CAFC). This figure reflects a significant threat, as it represents a notable portion of the $351 million total fraud losses reported in the same period. The scams typically involve fraudulent emails that impersonate trusted contacts, urging victims to update banking information. Fraudsters may compromise legitimate email accounts or use lookalike addresses to make their requests appear genuine. Victims often realize the fraud only when the intended recipient follows up on an unpaid invoice. Indigenous businesses in northern Ontario alone lost over $800,000 due to such scams. The CAFC emphasizes the importance of verifying any changes to payment instructions independently.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What types of businesses are targeted?
How can victims verify payment instructions?
What is the total reported fraud loss in 2026?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…