Internet Scam Reporting in Canada

While in the previous installment we focused on documenting the phishing attempt with code snippets and screenshots, as well as the first, basic fraud reports to the email forwarding provider and the domain registrar, here we look at the “next level” of fraud reporting.

I could not find an RCMP link to report fraud; instead, fraud reports in Canada are directed to a centre that supposedly collects all such reports and makes them available to law enforcement.

I summarized my experience as follows:

I received a fake Interac Email payment which linked to ie1.ca (a domain which appears to be recently purchased through GoDaddy Canada) on a page designed to look like an Interac Email transfer. I did not go through with any of it but documented it at [wintegrated]

However, before even starting to submit the report online, I had to create a GCKey, which is a weird animal, not connected to your actual identity – you can have more than one – and it expires if not used for more than 24 months.

The multipart submission process allowed for submitting only 3 files, which could be either text or images but no .zip archives.

Upon clicking “submit”, I was given “Complaint reference number: 2016-1054x”.

I then inquired with CIRA Webmaster if they have a program to suspend phishing domains.

I have even inquired even with Interac Communications and Media if they do anything about such phishing site.

I will update this article as more info appears.

*(*This article is unfinished – it was scheduled to appear in the hope that it will be finished before, but since this message is here and until it is removed, the article is to be considered work in progress*)*.

Sources / More info: RCMP-scams, GCKey, CIRA-contact, CIRA-investigating, Interac-contact

Wintegrated, fraud report, rcmp, scam, reporting fraud, stopping fraud, interac (Tags)