[{"data":1,"prerenderedAt":491},["ShallowReactive",2],{"footer-services-en":3,"footer-local-en":28,"post-\u002Fen\u002Fblog\u002Fdeepfake-voice-fraud-business":45,"post-alt-\u002Fen\u002Fblog\u002Fdeepfake-voice-fraud-business":471,"post-rel-\u002Fen\u002Fblog\u002Fdeepfake-voice-fraud-business":473},[4,8,12,16,20,24],{"path":5,"navTitle":6,"order":7},"\u002Fen\u002Fservices\u002Fcybersecurity-audit","Cybersecurity Audit",1,{"path":9,"navTitle":10,"order":11},"\u002Fen\u002Fservices\u002Fpenetration-testing","Penetration Testing",2,{"path":13,"navTitle":14,"order":15},"\u002Fen\u002Fservices\u002Fmicrosoft-365-google-workspace-audit","Microsoft 365 \u002F Google Workspace Audit",3,{"path":17,"navTitle":18,"order":19},"\u002Fen\u002Fservices\u002Flaw-25-compliance","Law 25 Compliance",4,{"path":21,"navTitle":22,"order":23},"\u002Fen\u002Fservices\u002Fremediation-hardening","Remediation and Hardening",5,{"path":25,"navTitle":26,"order":27},"\u002Fen\u002Fservices\u002Fongoing-security-partner","Ongoing Security Partner (vCISO)",6,[29,33,37,41],{"path":30,"city":31,"translationKey":32},"\u002Fen\u002Fcybersecurity-audit\u002Fmontreal","Montréal","montreal",{"path":34,"city":35,"translationKey":36},"\u002Fen\u002Fcybersecurity-audit\u002Flaval","Laval","laval",{"path":38,"city":39,"translationKey":40},"\u002Fen\u002Fcybersecurity-audit\u002Fsouth-shore","South Shore","rive-sud",{"path":42,"city":43,"translationKey":44},"\u002Fen\u002Fcybersecurity-audit\u002Fnorth-shore","North Shore","rive-nord",{"id":46,"title":47,"body":48,"category":420,"date":421,"description":422,"extension":423,"faq":424,"keyword":437,"meta":438,"minutes":23,"navigation":252,"path":439,"rawbody":440,"seo":441,"sources":442,"stem":461,"tags":462,"translationKey":468,"updated":469,"__hash__":470},"blog_en\u002Fen\u002Fblog\u002Fdeepfake-voice-fraud-business.md","Deepfake Voice Fraud: How to Protect Your Business",{"type":49,"value":50,"toc":411},"minimark",[51,55,58,61,82,87,90,93,102,106,109,135,138,142,145,223,231,235,238,241,320,323,326,330,334,337,340,351,359,362,369,373,376,379,397,408],[52,53,54],"p",{},"Tuesday, 4:40 p.m. The controller at a food distributor in Mississauga gets a call from the company president, who's on the road in Montréal. It's his voice, his pace, the way he says \"listen, this is important.\" He needs a $48,000 wire transfer to close a confidential acquisition before 5 p.m., and she's not to mention it to anyone.",[52,56,57],{},"The president was in a meeting two blocks away. His voice had been generated from interviews and videos he'd posted online.",[52,59,60],{},"That's an audio deepfake, or cloned voice. The story is fictional, but the technique is real, and you can't beat it by listening harder. You beat it with process.",[62,63,66],"callout",{"title":64,"type":65},"TL;DR","tip",[67,68,69,73,76,79],"ul",{},[70,71,72],"li",{},"A voice no longer proves identity: in June 2025, the Canadian Centre for Cyber Security and the Canadian Anti-Fraud Centre flagged AI-generated voice messages mimicking senior officials, with business executives among the targets.",[70,74,75],{},"The most reliable defence: hang up and call back on a number you already know, never the one the caller gives you or the one on your screen.",[70,77,78],{},"For money: dual approval, and no \"urgent\" exceptions, not even for the president.",[70,80,81],{},"A code word shared by finance and leadership adds a simple check.",[83,84,86],"h2",{"id":85},"what-is-deepfake-voice-fraud","What is deepfake voice fraud?",[52,88,89],{},"Deepfake voice fraud is a scam in which the caller uses an AI-generated voice to pass as someone you know: an executive, a supplier, a colleague.",[52,91,92],{},"The Competition Bureau of Canada defines deepfakes as realistic-looking fake images, videos or audio impersonating real people. The raw material is often public: interviews, podcasts, webinars, social media videos.",[52,94,95,96,101],{},"The call is all the more convincing because the number displayed can be faked. As the Canadian Anti-Fraud Centre points out, scammers use spoofing to make a call appear to come from a trusted number. This is the old ",[97,98,100],"a",{"href":99},"\u002Fen\u002Fblog\u002Fbusiness-email-compromise-ceo-fraud","CEO fraud",", moving from email to the phone.",[83,103,105],{"id":104},"what-canadian-authorities-say","What Canadian authorities say",[52,107,108],{},"Canadian authorities treat deepfakes as an active threat, not a curiosity.",[67,110,111,123,129],{},[70,112,113,117,118,122],{},[114,115,116],"strong",{},"Canadian Centre for Cyber Security."," Its ",[119,120,121],"em",{},"National Cyber Threat Assessment 2025-2026"," notes that threat actors use generative AI to \"create realistic audio and visual content impersonating trusted individuals,\" which helps them establish legitimacy and persuade targets.",[70,124,125,128],{},[114,126,127],{},"Joint advisory, June 23, 2025."," The Cyber Centre and the Canadian Anti-Fraud Centre describe a campaign of text messages and AI-generated voice messages impersonating senior officials. Targets include business executives. Warning signs: urgency, requests to move to another messaging app, suspicious links, and a tone that seems out of character.",[70,130,131,134],{},[114,132,133],{},"Competition Bureau, March 9, 2026."," It warns that scammers use voice cloning and AI-generated messages to impersonate government officials.",[52,136,137],{},"The best-known case happened abroad. According to CNN (May 2024), a finance employee at engineering firm Arup in Hong Kong sent about HK$200 million (roughly US$25 million) in 15 transactions after a video call in which the chief financial officer and other colleagues were deepfakes. Arup confirmed that fake voices and images were used.",[83,139,141],{"id":140},"the-scenarios-that-target-small-businesses","The scenarios that target small businesses",[52,143,144],{},"In a small business, a cloned voice is mostly used to get money, access or an exception to procedure, by leaning on urgency and authority.",[146,147,148,164],"table",{},[149,150,151],"thead",{},[152,153,154,158,161],"tr",{},[155,156,157],"th",{},"Scenario",[155,159,160],{},"Typical request",[155,162,163],{},"Verification",[165,166,167,179,190,201,212],"tbody",{},[152,168,169,173,176],{},[170,171,172],"td",{},"Fake president",[170,174,175],{},"An urgent, confidential wire transfer",[170,177,178],{},"Call back the executive's known number, then dual approval",[152,180,181,184,187],{},[170,182,183],{},"Fake supplier",[170,185,186],{},"New banking details",[170,188,189],{},"Call the number in the vendor file, never the one from the call",[152,191,192,195,198],{},[170,193,194],{},"Fake employee calling the help desk",[170,196,197],{},"A password or MFA reset",[170,199,200],{},"Call back the number in the HR file and get manager approval",[152,202,203,206,209],{},[170,204,205],{},"Fake technician calling an employee",[170,207,208],{},"An MFA code, or installing remote access software",[170,210,211],{},"Nobody gives out a code over the phone, ever",[152,213,214,217,220],{},[170,215,216],{},"Voice message from an executive",[170,218,219],{},"Continuing the conversation on another messaging app",[170,221,222],{},"Call back through the usual channels",[52,224,225,226,230],{},"The fake supplier scenario is covered in detail in our article on ",[97,227,229],{"href":228},"\u002Fen\u002Fblog\u002Fvendor-banking-change-fraud","vendor banking change fraud",".",[83,232,234],{"id":233},"the-defence-a-process-that-doesnt-depend-on-the-voice","The defence: a process that doesn't depend on the voice",[52,236,237],{},"The only reliable defence is to make the voice insufficient: no sensitive request should be carried out on the strength of a phone call alone, however familiar the voice.",[52,239,240],{},"The June 2025 joint advisory puts it this way: verify independently by contacting the person or organization \"through alternate, previously confirmed channels.\" As internal rules:",[67,242,245,260,270,280,290,300,310],{"className":243},[244],"contains-task-list",[70,246,249,255,256,259],{"className":247},[248],"task-list-item",[250,251],"input",{"disabled":252,"type":253,"aria-label":254},true,"checkbox","Mandatory call-back to a number you already have (staff directory, vendor file), never the one the caller gives or the one displayed."," ",[114,257,258],{},"Mandatory call-back"," to a number you already have (staff directory, vendor file), never the one the caller gives or the one displayed.",[70,261,263,255,266,269],{"className":262},[248],[250,264],{"disabled":252,"type":253,"aria-label":265},"Dual approval for any transfer above a set threshold, and for any change of banking details.",[114,267,268],{},"Dual approval"," for any transfer above a set threshold, and for any change of banking details.",[70,271,273,255,276,279],{"className":272},[248],[250,274],{"disabled":252,"type":253,"aria-label":275},"Waiting period for a new payee, for example until the next business day.",[114,277,278],{},"Waiting period"," for a new payee, for example until the next business day.",[70,281,283,255,286,289],{"className":282},[248],[250,284],{"disabled":252,"type":253,"aria-label":285},"Code word between finance and leadership, never written in an email, changed regularly.",[114,287,288],{},"Code word"," between finance and leadership, never written in an email, changed regularly.",[70,291,293,255,296,299],{"className":292},[248],[250,294],{"disabled":252,"type":253,"aria-label":295},"Written commitment from leadership: \"I will never ask you to bypass the process, even in an emergency.\"",[114,297,298],{},"Written commitment from leadership",": \"I will never ask you to bypass the process, even in an emergency.\"",[70,301,303,255,306,309],{"className":302},[248],[250,304],{"disabled":252,"type":253,"aria-label":305},"Help desk: no password or MFA reset based on a phone call alone.",[114,307,308],{},"Help desk",": no password or MFA reset based on a phone call alone.",[70,311,313,255,316,319],{"className":312},[248],[250,314],{"disabled":252,"type":253,"aria-label":315},"MFA codes: never shared over the phone.",[114,317,318],{},"MFA codes",": never shared over the phone.",[52,321,322],{},"The code word isn't a movie trope: in December 2024, the FBI advised families to create a secret word or phrase to verify a caller's identity. At work, it complements the call-back; it doesn't replace it.",[52,324,325],{},"Leadership's commitment matters most. Scammers count on fear of displeasing the boss. A controller who knows she'll be thanked for hanging up on the \"president\" won't give in.",[327,328],"cta",{"variant":329},"audit",[83,331,333],{"id":332},"train-your-team-to-hang-up","Train your team to hang up",[52,335,336],{},"Learning to hang up without embarrassment matters more than learning to spot a fake voice, because the best clones leave no audible clues.",[52,338,339],{},"The joint advisory lists a few things to listen for: a flat tone, unexpected background noise, choppy sentences. Useful, but not enough. Build reflexes instead:",[67,341,342,345,348],{},[70,343,344],{},"any urgent, confidential or unusual request triggers the process, no matter who's calling;",[70,346,347],{},"\"I'll call you right back\" is always an acceptable answer;",[70,349,350],{},"nobody gets blamed for checking.",[52,352,353,354,358],{},"Add a fraudulent call scenario to your ",[97,355,357],{"href":356},"\u002Fen\u002Fblog\u002Fphishing-simulation-employees","phishing simulations",", especially for finance, payroll, reception and the help desk.",[52,360,361],{},"The FBI also suggests limiting public content featuring your voice. A small business can't erase the president's interviews, which is exactly why the process has to hold even when the voice is perfect.",[52,363,364,365,230],{},"Finally, a fake call can be followed by a \"confirmation\" email that appears to come from your own domain. Check that your domain is protected against spoofing with our ",[97,366,368],{"href":367},"\u002Fen\u002Ftools\u002Fdmarc-spf-dkim-checker","DMARC, SPF and DKIM checker",[83,370,372],{"id":371},"if-you-think-youve-been-targeted","If you think you've been targeted",[52,374,375],{},"Hang up, call the real person back on a known number and, if money has left, call your financial institution immediately: every hour counts when trying to stop a transfer.",[52,377,378],{},"Then:",[380,381,382,385,388,391,394],"ol",{},[70,383,384],{},"Report the incident to your local police, the Canadian Anti-Fraud Centre and the Canadian Centre for Cyber Security, as the joint advisory recommends.",[70,386,387],{},"Write down the number displayed, the time, the length and content of the call, and keep any voicemails and texts.",[70,389,390],{},"Warn your staff: the scammers may try other people in the organization.",[70,392,393],{},"If personal information was disclosed, assess whether it's a privacy breach you must record or report (in Quebec, a confidentiality incident under Law 25), and confirm with legal counsel.",[70,395,396],{},"Review the step that failed, without looking for someone to blame.",[52,398,399,400,403,404,230],{},"Want to know whether your payment and help desk procedures would hold up against a well-imitated call? Our ",[97,401,402],{"href":5},"cybersecurity audit"," reviews them with your team. To talk it through first, book a ",[97,405,407],{"href":406},"\u002Fen\u002Ffree-consultation","free consultation",[327,409],{"variant":410},"devis",{"title":412,"searchDepth":11,"depth":15,"links":413},"",[414,415,416,417,418,419],{"id":85,"depth":11,"text":86},{"id":104,"depth":11,"text":105},{"id":140,"depth":11,"text":141},{"id":233,"depth":11,"text":234},{"id":332,"depth":11,"text":333},{"id":371,"depth":11,"text":372},"threats","2026-10-24","A call from the 'CEO' demanding an urgent wire transfer? Call-backs to known numbers, code words and dual approval: how to stop deepfake voice fraud at work.","md",[425,428,431,434],{"q":426,"a":427},"Can AI really clone someone's voice?","Yes. The Competition Bureau of Canada defines deepfakes as realistic-looking fake images, videos or audio impersonating real people, and warns that scammers use voice cloning. In June 2025, the Canadian Centre for Cyber Security and the Canadian Anti-Fraud Centre also warned about AI-generated voice messages mimicking senior officials, with business executives among the targets.",{"q":429,"a":430},"How can you tell if a call uses a cloned voice?","You can't rely on your ears. Canadian authorities mention a few clues, such as a flat tone, unexpected background noise or choppy sentences, but a good clone may show none of them. The only reliable check is to hang up and call the person back on a number you already know.",{"q":432,"a":433},"Does a code word actually help against deepfakes?","Yes, as an extra layer. In December 2024, the FBI advised families to create a secret word or phrase to verify a caller's identity. At work, a verification phrase known only to finance and leadership, never written in an email and changed regularly, adds a simple barrier. It doesn't replace call-backs or dual approval for payments.",{"q":435,"a":436},"What should we do if we sent a wire transfer after a fake CEO call?","Call your financial institution right away to try to stop or recall the transfer, then your local police. Report the incident to the Canadian Anti-Fraud Centre and the Canadian Centre for Cyber Security. Write down the number displayed, the time and what was said, and warn your team, since others may be targeted next.","deepfake voice fraud",{},"\u002Fen\u002Fblog\u002Fdeepfake-voice-fraud-business","---\ntitle: \"Deepfake Voice Fraud: How to Protect Your Business\"\ndescription: \"A call from the 'CEO' demanding an urgent wire transfer? Call-backs to known numbers, code words and dual approval: how to stop deepfake voice fraud at work.\"\ndate: 2026-10-24\ncategory: threats\ntags: [\"deepfake\", \"fraud\", \"ai\", \"social engineering\", \"wire transfer\"]\ntranslationKey: deepfake-voix\nkeyword: \"deepfake voice fraud\"\nfaq:\n  - q: \"Can AI really clone someone's voice?\"\n    a: \"Yes. The Competition Bureau of Canada defines deepfakes as realistic-looking fake images, videos or audio impersonating real people, and warns that scammers use voice cloning. In June 2025, the Canadian Centre for Cyber Security and the Canadian Anti-Fraud Centre also warned about AI-generated voice messages mimicking senior officials, with business executives among the targets.\"\n  - q: \"How can you tell if a call uses a cloned voice?\"\n    a: \"You can't rely on your ears. Canadian authorities mention a few clues, such as a flat tone, unexpected background noise or choppy sentences, but a good clone may show none of them. The only reliable check is to hang up and call the person back on a number you already know.\"\n  - q: \"Does a code word actually help against deepfakes?\"\n    a: \"Yes, as an extra layer. In December 2024, the FBI advised families to create a secret word or phrase to verify a caller's identity. At work, a verification phrase known only to finance and leadership, never written in an email and changed regularly, adds a simple barrier. It doesn't replace call-backs or dual approval for payments.\"\n  - q: \"What should we do if we sent a wire transfer after a fake CEO call?\"\n    a: \"Call your financial institution right away to try to stop or recall the transfer, then your local police. Report the incident to the Canadian Anti-Fraud Centre and the Canadian Centre for Cyber Security. Write down the number displayed, the time and what was said, and warn your team, since others may be targeted next.\"\nsources:\n  - title: \"Canadian Anti-Fraud Centre: Joint Advisory, Cyber officials warn Canadians of malicious campaign to impersonate high-profile public figures (June 23, 2025)\"\n    url: \"https:\u002F\u002Fantifraudcentre-centreantifraude.ca\u002Fnews-nouvelles\u002F2025\u002F2025-06-23-eng.htm\"\n  - title: \"Competition Bureau Canada: Watch out for AI-generated government impersonators (March 9, 2026)\"\n    url: \"https:\u002F\u002Fwww.canada.ca\u002Fen\u002Fcompetition-bureau\u002Fnews\u002F2026\u002F03\u002Fwatch-out-for-ai-generated-government-impersonators.html\"\n  - title: \"Canadian Centre for Cyber Security: National Cyber Threat Assessment 2025-2026\"\n    url: \"https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fnational-cyber-threat-assessment-2025-2026\"\n  - title: \"Canadian Anti-Fraud Centre: Emergency scams\"\n    url: \"https:\u002F\u002Fantifraudcentre-centreantifraude.ca\u002Fscams-fraudes\u002Femergency-urgence-eng.htm\"\n  - title: \"FBI IC3: Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (December 3, 2024)\"\n    url: \"https:\u002F\u002Fwww.ic3.gov\u002FPSA\u002F2024\u002FPSA241203\"\n  - title: \"CNN: British engineering giant Arup revealed as $25 million deepfake scam victim (May 16, 2024)\"\n    url: \"https:\u002F\u002Fedition.cnn.com\u002F2024\u002F05\u002F16\u002Ftech\u002Farup-deepfake-scam-loss-hong-kong-intl-hnk\"\n---\n\nTuesday, 4:40 p.m. The controller at a food distributor in Mississauga gets a call from the company president, who's on the road in Montréal. It's his voice, his pace, the way he says \"listen, this is important.\" He needs a $48,000 wire transfer to close a confidential acquisition before 5 p.m., and she's not to mention it to anyone.\n\nThe president was in a meeting two blocks away. His voice had been generated from interviews and videos he'd posted online.\n\nThat's an audio deepfake, or cloned voice. The story is fictional, but the technique is real, and you can't beat it by listening harder. You beat it with process.\n\n::callout{type=\"tip\" title=\"TL;DR\"}\n- A voice no longer proves identity: in June 2025, the Canadian Centre for Cyber Security and the Canadian Anti-Fraud Centre flagged AI-generated voice messages mimicking senior officials, with business executives among the targets.\n- The most reliable defence: hang up and call back on a number you already know, never the one the caller gives you or the one on your screen.\n- For money: dual approval, and no \"urgent\" exceptions, not even for the president.\n- A code word shared by finance and leadership adds a simple check.\n::\n\n## What is deepfake voice fraud?\n\nDeepfake voice fraud is a scam in which the caller uses an AI-generated voice to pass as someone you know: an executive, a supplier, a colleague.\n\nThe Competition Bureau of Canada defines deepfakes as realistic-looking fake images, videos or audio impersonating real people. The raw material is often public: interviews, podcasts, webinars, social media videos.\n\nThe call is all the more convincing because the number displayed can be faked. As the Canadian Anti-Fraud Centre points out, scammers use spoofing to make a call appear to come from a trusted number. This is the old [CEO fraud](\u002Fen\u002Fblog\u002Fbusiness-email-compromise-ceo-fraud), moving from email to the phone.\n\n## What Canadian authorities say\n\nCanadian authorities treat deepfakes as an active threat, not a curiosity.\n\n- **Canadian Centre for Cyber Security.** Its *National Cyber Threat Assessment 2025-2026* notes that threat actors use generative AI to \"create realistic audio and visual content impersonating trusted individuals,\" which helps them establish legitimacy and persuade targets.\n- **Joint advisory, June 23, 2025.** The Cyber Centre and the Canadian Anti-Fraud Centre describe a campaign of text messages and AI-generated voice messages impersonating senior officials. Targets include business executives. Warning signs: urgency, requests to move to another messaging app, suspicious links, and a tone that seems out of character.\n- **Competition Bureau, March 9, 2026.** It warns that scammers use voice cloning and AI-generated messages to impersonate government officials.\n\nThe best-known case happened abroad. According to CNN (May 2024), a finance employee at engineering firm Arup in Hong Kong sent about HK$200 million (roughly US$25 million) in 15 transactions after a video call in which the chief financial officer and other colleagues were deepfakes. Arup confirmed that fake voices and images were used.\n\n## The scenarios that target small businesses\n\nIn a small business, a cloned voice is mostly used to get money, access or an exception to procedure, by leaning on urgency and authority.\n\n| Scenario | Typical request | Verification |\n|---|---|---|\n| Fake president | An urgent, confidential wire transfer | Call back the executive's known number, then dual approval |\n| Fake supplier | New banking details | Call the number in the vendor file, never the one from the call |\n| Fake employee calling the help desk | A password or MFA reset | Call back the number in the HR file and get manager approval |\n| Fake technician calling an employee | An MFA code, or installing remote access software | Nobody gives out a code over the phone, ever |\n| Voice message from an executive | Continuing the conversation on another messaging app | Call back through the usual channels |\n\nThe fake supplier scenario is covered in detail in our article on [vendor banking change fraud](\u002Fen\u002Fblog\u002Fvendor-banking-change-fraud).\n\n## The defence: a process that doesn't depend on the voice\n\nThe only reliable defence is to make the voice insufficient: no sensitive request should be carried out on the strength of a phone call alone, however familiar the voice.\n\nThe June 2025 joint advisory puts it this way: verify independently by contacting the person or organization \"through alternate, previously confirmed channels.\" As internal rules:\n\n- [ ] **Mandatory call-back** to a number you already have (staff directory, vendor file), never the one the caller gives or the one displayed.\n- [ ] **Dual approval** for any transfer above a set threshold, and for any change of banking details.\n- [ ] **Waiting period** for a new payee, for example until the next business day.\n- [ ] **Code word** between finance and leadership, never written in an email, changed regularly.\n- [ ] **Written commitment from leadership**: \"I will never ask you to bypass the process, even in an emergency.\"\n- [ ] **Help desk**: no password or MFA reset based on a phone call alone.\n- [ ] **MFA codes**: never shared over the phone.\n\nThe code word isn't a movie trope: in December 2024, the FBI advised families to create a secret word or phrase to verify a caller's identity. At work, it complements the call-back; it doesn't replace it.\n\nLeadership's commitment matters most. Scammers count on fear of displeasing the boss. A controller who knows she'll be thanked for hanging up on the \"president\" won't give in.\n\n::cta{variant=\"audit\"}\n::\n\n## Train your team to hang up\n\nLearning to hang up without embarrassment matters more than learning to spot a fake voice, because the best clones leave no audible clues.\n\nThe joint advisory lists a few things to listen for: a flat tone, unexpected background noise, choppy sentences. Useful, but not enough. Build reflexes instead:\n\n- any urgent, confidential or unusual request triggers the process, no matter who's calling;\n- \"I'll call you right back\" is always an acceptable answer;\n- nobody gets blamed for checking.\n\nAdd a fraudulent call scenario to your [phishing simulations](\u002Fen\u002Fblog\u002Fphishing-simulation-employees), especially for finance, payroll, reception and the help desk.\n\nThe FBI also suggests limiting public content featuring your voice. A small business can't erase the president's interviews, which is exactly why the process has to hold even when the voice is perfect.\n\nFinally, a fake call can be followed by a \"confirmation\" email that appears to come from your own domain. Check that your domain is protected against spoofing with our [DMARC, SPF and DKIM checker](\u002Fen\u002Ftools\u002Fdmarc-spf-dkim-checker).\n\n## If you think you've been targeted\n\nHang up, call the real person back on a known number and, if money has left, call your financial institution immediately: every hour counts when trying to stop a transfer.\n\nThen:\n\n1. Report the incident to your local police, the Canadian Anti-Fraud Centre and the Canadian Centre for Cyber Security, as the joint advisory recommends.\n2. Write down the number displayed, the time, the length and content of the call, and keep any voicemails and texts.\n3. Warn your staff: the scammers may try other people in the organization.\n4. If personal information was disclosed, assess whether it's a privacy breach you must record or report (in Quebec, a confidentiality incident under Law 25), and confirm with legal counsel.\n5. Review the step that failed, without looking for someone to blame.\n\nWant to know whether your payment and help desk procedures would hold up against a well-imitated call? Our [cybersecurity audit](\u002Fen\u002Fservices\u002Fcybersecurity-audit) reviews them with your team. To talk it through first, book a [free consultation](\u002Fen\u002Ffree-consultation).\n\n::cta{variant=\"devis\"}\n::\n",{"title":47,"description":422},[443,446,449,452,455,458],{"title":444,"url":445},"Canadian Anti-Fraud Centre: Joint Advisory, Cyber officials warn Canadians of malicious campaign to impersonate high-profile public figures (June 23, 2025)","https:\u002F\u002Fantifraudcentre-centreantifraude.ca\u002Fnews-nouvelles\u002F2025\u002F2025-06-23-eng.htm",{"title":447,"url":448},"Competition Bureau Canada: Watch out for AI-generated government impersonators (March 9, 2026)","https:\u002F\u002Fwww.canada.ca\u002Fen\u002Fcompetition-bureau\u002Fnews\u002F2026\u002F03\u002Fwatch-out-for-ai-generated-government-impersonators.html",{"title":450,"url":451},"Canadian Centre for Cyber Security: National Cyber Threat Assessment 2025-2026","https:\u002F\u002Fwww.cyber.gc.ca\u002Fen\u002Fguidance\u002Fnational-cyber-threat-assessment-2025-2026",{"title":453,"url":454},"Canadian Anti-Fraud Centre: Emergency scams","https:\u002F\u002Fantifraudcentre-centreantifraude.ca\u002Fscams-fraudes\u002Femergency-urgence-eng.htm",{"title":456,"url":457},"FBI IC3: Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (December 3, 2024)","https:\u002F\u002Fwww.ic3.gov\u002FPSA\u002F2024\u002FPSA241203",{"title":459,"url":460},"CNN: British engineering giant Arup revealed as $25 million deepfake scam victim (May 16, 2024)","https:\u002F\u002Fedition.cnn.com\u002F2024\u002F05\u002F16\u002Ftech\u002Farup-deepfake-scam-loss-hong-kong-intl-hnk","en\u002Fblog\u002Fdeepfake-voice-fraud-business",[463,464,465,466,467],"deepfake","fraud","ai","social engineering","wire transfer","deepfake-voix",null,"rsvxuT4DsNDtkOlCupNTiiVUyOlQ8nlX04NFuOQt29A",{"path":472},"\u002Fblogue\u002Ffraude-hypertrucage-voix-clonee-entreprise",[474,480,486],{"path":228,"title":475,"description":476,"category":420,"minutes":23,"tags":477},"Vendor Banking Change Fraud: How It Works and How to Stop It","A supplier emails new banking details? What to do if the payment already went out, how vendor banking change fraud works and the simple process that stops it.",[464,467,478,479],"email","small business",{"path":99,"title":481,"description":482,"category":420,"minutes":23,"tags":483},"Business Email Compromise and CEO Fraud: How to Stop It","Fake CEO, fake supplier, diverted payroll: how business email compromise works, what it costs Canadian small businesses and the simple controls that stop it.",[484,464,478,485],"bec","phishing",{"path":487,"title":488,"description":489,"category":420,"minutes":27,"tags":490},"\u002Fen\u002Fblog\u002Fhow-to-spot-phishing-email-examples","How to Spot a Phishing Email: 5 Canadian Examples Decoded","Fake CRA e-Transfers, Canada Post parcel fees, Hydro-Québec refunds: five phishing examples broken down, plus the warning signs to check before you click.",[485,478,464,479],1792972905378]