09/02/2026
Would you recognize an email scam if it looked like it came from your boss?
Oceanside RCMP recently reported close to $170,000 in fraud losses in the Parksville Qualicum Beach area in just one week, including a significant loss connected to a fraudulent email payment request.
That story caught our attention because we have received one too.
Not long ago, an email landed in our office that appeared to come from our Executive Director. It looked like a normal work request and asked me to pay an invoice.
At first glance, there was nothing particularly dramatic about it. No promise of millions of dollars. No suspicious stranger asking for banking information. Just what appeared to be a request from someone I work with every day.
Except she hadn't sent it.
Fortunately, we caught it before anything was paid, but it was a great reminder of how much these scams have changed.
Fraudsters are counting on something many small businesses naturally have: trust.
If an email appears to come from the owner, manager, bookkeeper or a familiar supplier, an employee may simply follow the instructions, especially when the request sounds routine or urgent.
A few simple processes can provide an extra layer of protection:
• Confirm unexpected payment requests directly with the person who supposedly sent them.
• Verify changes to supplier banking information using contact information you already have.
• Consider requiring a second approval for larger or unusual payments.
• Give employees permission to question a request, even when it appears to come from the boss.
• Be particularly cautious when someone is asking you to bypass your normal process because something is "urgent."
Our experience also reinforced one very simple rule:
When a payment request seems even slightly unusual, ask.
A 30-second phone call or a quick walk down the hall can be a lot easier than trying to recover money after it has been sent.
So here's a question worth asking your team:
If an email that looked like it came from you arrived tomorrow asking someone to send money, would they know how to verify it?