Who do I report a look-alike domain fraud to?
In Canada, report it to the Canadian Anti-Fraud Centre and to your local police, and call your bank if money moved.
Last read from the sources at the foot of this page.
Where do I report?
Whether you are a victim or a witness, you can report a fraud or cybercrime online at reportcyberandfraud.canada.ca . You have the option to report anonymously if you wish.
In Canada you can report fraud to the Canadian Anti-Fraud Centre online at reportcyberandfraud.canada.ca or by phone at 1-888-495-8501, and you can report anonymously if you wish.
The Canadian Anti-Fraud Centre asks victims to contact local police as soon as possible, because investigating is the police's role.
The RCMP also lists [email protected], the Canadian Centre for Cyber Security, which helps with mitigation where a technical compromise may have occurred.
Is it worth reporting if no money was lost?
If you have been a victim of fraud or cybercrime, please contact your local police as soon as possible.
Yes. The RCMP says a criminal act has occurred whether or not funds were transferred.
The Canadian Anti-Fraud Centre estimates that only 5 to 10 percent of victims report to it.
What do I include?
Contact [email protected] . The Cyber Centre will assist in mitigation and prevention, especially in cases where a technical compromise may have occurred.
- The look-alike domain and the real one it copies.
- The emails as attachments, with their headers.
- Any amount, account number and bank named in the request.
- The dates and the names of the people who received it.
- Describe it as business email compromise or wire fraud, as the RCMP suggests.
Where does this come from?
- Canadian Anti-Fraud Centre: Report fraud and cybercrimeantifraudcentre-centreantifraude.caRead 14 October 2026
- RCMP: Business Email Compromisercmp.caRead 14 October 2026
- Canadian Anti-Fraud Centre: news release, 24 July 2025antifraudcentre-centreantifraude.caRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/