We paid an invoice from a look-alike domain. What now?

What do I do first?

If funds were transferred - immediately report the incident to your financial institution. Share the following information: the amount the account destination other pertinent details from the request ask about recalling the transfer be sure they contact the recipient financial institution

The RCMP advises that if funds were transferred, you report it to your financial institution immediately, give the amount and the destination account, ask about recalling the transfer, and make sure they contact the receiving bank.

1. Call the bank's fraud line, not your branch's general number.
2. Give the amount, the date and time, and the account the money went to.
3. Ask in plain words for a recall of the transfer and for the bank to contact the receiving bank.
4. Write down the name of the person you spoke to and any reference number.

Can the money come back?

In this case, the fraud involved a spear phishing attack that tricked the Canadian firm into wiring funds to a fraudulent account in Hong Kong.

Sometimes, when the banks act quickly.

In a case the Canadian Anti-Fraud Centre announced on 24 July 2025, a Vancouver-area law firm was tricked into wiring funds to a fraudulent account in Hong Kong.

A bank in Hong Kong flagged the transfer, and the full amount was returned to the firm.

What do I do next?

If you believe you have been a victim of this or a similar scam, immediately contact your bank, local police, and the CAFC .

The Canadian Anti-Fraud Centre says to contact your bank, your local police and the Centre immediately if you believe you have been a victim.

1. Report to the Canadian Anti-Fraud Centre and to local police, and note both reference numbers.
2. Keep every email from the look-alike, with headers, and the payment records.
3. Report the look-alike to its registrar so it stops being used on others.
4. Warn the real supplier or client that their name was used.