Funds Transfer Fraud – What Canadian Small Businesses Need to Know

Funds transfer fraud – sometimes called business email compromise – is one of the fastest-growing cyber threats facing Canadian small businesses. It happens when a criminal impersonates someone your business trusts to trick you into sending money to the wrong account.

It might show up as an email that looks like it’s from your CEO, asking the accounting team to process an urgent wire transfer. Or a message that appears to be from a vendor you pay regularly, letting you know their banking details have changed. The email looks legitimate. The request seems reasonable. By the time anyone realizes something is off, the money is gone.

---

Why it works

Funds transfer fraud is effective because it exploits trust rather than technology. Unlike ransomware that requires breaking into your systems, this type of fraud often needs nothing more than a convincing email and a moment of distraction.

Criminals research their targets in advance – using publicly available information to understand your business relationships, your communication style, and your payment process. The messages they send can be surprisingly convincing.

---

What it costs

Funds transfer fraud is one of the most common causes of cyber insurance claims in Canada. Individual incidents range from a few thousand to hundreds of thousands of dollars – and money wired internationally is often very difficult to recover.

For small businesses, even a single incident at the lower end of that range can be financially devastating – especially without insurance coverage in place.

---

How to reduce your risk

The most effective defence is a simple verification process:

• Require that any funds transfer over a certain amount (say, $10,000 or $25,000) be verbally confirmed with the requestor using a known phone number – not one provided in the email
• Train your team to be skeptical of urgency. Fraudulent requests often come with pressure to act quickly and quietly.
• Verify any change to a vendor’s banking details with a phone call before you process a payment

These steps cost nothing. They stop most fraud attempts before they succeed.

---

What cyber insurance covers

If your business falls victim despite taking reasonable precautions, a cyber insurance policy with funds transfer fraud coverage can help recover some or all of the loss – up to your policy’s sublimit for this type of claim.

Sublimits vary between policies, so it’s worth asking specifically about the funds transfer fraud limit when comparing options. Make sure it reflects the size of transactions your business actually processes.

---

The bottom line

Funds transfer fraud is one of the easiest cyber risks to defend against with the right process in place – and one of the most expensive when that process isn’t there. A combination of employee awareness, verification procedures, and solid cyber insurance gives your business real protection against this very real threat.

---